bootanim: remove access to vendor_file type

This domain should instead depend on same_process_hal_file, to which all
domains already have access.

Bug: 70990973
Test: emulator -gpu guest; boots with no denials from bootanim.
Change-Id: Ic577dd3c3895f8471d68a0da245d37a17cd6a3f3

parent 9eba210e

target/board/generic/sepolicy/bootanim.te

+0 −1

Original line number	Diff line number	Diff line
		@@ -3,7 +3,6 @@ allow bootanim ashmem_device:chr_file execute;
		#TODO: This can safely be ignored until b/62954877 is fixed
		dontaudit bootanim system_data_file:dir read;

		allow bootanim vendor_file:file { execute getattr open read };
		allow bootanim graphics_device:chr_file { read ioctl open };

		set_prop(bootanim, qemu_prop)