From 132d2f251541dd09875891e22f9a24f8924dac99 Mon Sep 17 00:00:00 2001 From: Wilson Sung Date: Sun, 29 Dec 2024 19:41:00 -0800 Subject: [PATCH] Revert "Set up access control rule for aocxd" This reverts commit f3564e9b91c423a5ecd65ef15076b5750dccceea. Reason for revert: BB Change-Id: If529dbe90cdae4cd9266af85de63bb8a4f808977 Fix: 386696682 --- aoc/aoc.mk | 6 ------ aoc/sepolicy/allowlist/aocxd_neverallow.te | 2 -- 2 files changed, 8 deletions(-) delete mode 100644 aoc/sepolicy/allowlist/aocxd_neverallow.te diff --git a/aoc/aoc.mk b/aoc/aoc.mk index 8ef4e26..13d849c 100644 --- a/aoc/aoc.mk +++ b/aoc/aoc.mk @@ -1,11 +1,5 @@ BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/aoc/sepolicy -# Skip aosp_ build due to dcservice_app is not available -ifeq (,$(filter aosp_%, $(TARGET_PRODUCT))) -BOARD_VENDOR_SEPOLICY_DIRS += \ - device/google/gs-common/aoc/sepolicy/allowlist -endif - PRODUCT_PACKAGES += dump_aoc \ aocd \ aocxd diff --git a/aoc/sepolicy/allowlist/aocxd_neverallow.te b/aoc/sepolicy/allowlist/aocxd_neverallow.te deleted file mode 100644 index 72b7b1a..0000000 --- a/aoc/sepolicy/allowlist/aocxd_neverallow.te +++ /dev/null @@ -1,2 +0,0 @@ -# set up rule to control the access to aocxd -neverallow { domain -hwservicemanager -servicemanager -vndservicemanager -system_suspend_server -dumpstate -hal_audio_default -dcservice_app } aocxd:binder { call transfer };