Remove mounton from app and web zygote
These aren't necessary for app compat overrides
Change-Id: Ie210a6487a80ef4fa618beedef0d957d79c7d38a
Fixes: 319616964
Test: presubmit
diff --git a/private/app_zygote.te b/private/app_zygote.te
index 46cea8e..e3869cd 100644
--- a/private/app_zygote.te
+++ b/private/app_zygote.te
@@ -34,8 +34,6 @@
# Interaction between the app_zygote and its children.
allow app_zygote isolated_app:process setpgid;
-allow app_zygote properties_device:dir mounton;
-
# TODO (b/63631799) fix this access
dontaudit app_zygote mnt_expand_file:dir getattr;
diff --git a/private/webview_zygote.te b/private/webview_zygote.te
index 7b05af2..0556950 100644
--- a/private/webview_zygote.te
+++ b/private/webview_zygote.te
@@ -83,8 +83,6 @@
allow webview_zygote system_data_file:lnk_file r_file_perms;
-allow webview_zygote properties_device:dir mounton;
-
# Send unsolicited message to system_server
unix_socket_send(webview_zygote, system_unsolzygote, system_server)