diff --git a/sepolicy/base/te/render_service.te b/sepolicy/base/te/render_service.te
index 39fde01ee34c27abfe55b3b78aebb1bd075e026d..5a1e48d85a14a47c67429dbca70e55d690f27dd1 100644
--- a/sepolicy/base/te/render_service.te
+++ b/sepolicy/base/te/render_service.te
@@ -65,7 +65,6 @@ allow render_service tracefs:dir { search };
 allow render_service tracefs_trace_marker_file:file { open write };
 allow render_service ui_service:binder { call transfer };
 allow render_service ui_service:fd { use };
-allow render_service sh:fd { use };
 allowxperm render_service dev_dri_file:chr_file ioctl { 0x640d 0x6411 0x641e 0x641f 0x642d 0x64a0 0x64a1 0x64a6 0x64a7 0x64aa 0x64b2 0x64b4 0x64b5 0x64b6 0x64b9 };
 allowxperm render_service dev_mali:chr_file ioctl { 0x8000 0x8001 0x8003 0x8005 0x800e 0x8011 0x8018 0x8024 0x8026 0x8027 0x8029 0x802a 0x802b 0x802c 0x802d 0x802e 0x800f 0x8030 0x8031 0x8033 0x8034 0x8036 };
 allowxperm render_service dev_rga:chr_file ioctl { 0x601b };
diff --git a/sepolicy/base/te/sh.te b/sepolicy/base/te/sh.te
index 894cd666639d4931567940873e416fcb682e5af0..24e3bbaf97179e6ee84ab7f2266b57b7f3890523 100644
--- a/sepolicy/base/te/sh.te
+++ b/sepolicy/base/te/sh.te
@@ -341,7 +341,6 @@ allow sh wifi_host:dir { getattr search };
 allow sh wifi_host:file { open read };
 allow sh wifi_manager_service:dir { getattr search };
 allow sh wifi_manager_service:file { open read };
-allow sh dev_mali:chr_file { getattr ioctl map open read write };
 allowxperm sh data_hilogd_file:file ioctl { 0x5413 };
 allowxperm sh devpts:chr_file ioctl { 0x5413 };
 allowxperm sh hdcd:fifo_file ioctl { 0x5413 };