Revert "Set up access control rule for aocxd"

Revert submission 31133794-aocx_sepolicy Reason for revert: http://b/391697603 build break Reverted changes: /q/submissionid:31133794-aocx_sepolicy Change-Id: I602d3ba880931a045146f216075f7baca513f0f3
2025-01-22 14:59:13 -08:00 · 2025-01-22 14:59:13 -08:00 · 728e059b69
commit 728e059b69
parent cb1a8297c3
4 changed files with 1 additions and 22 deletions
--- a/aoc/aoc.mk
+++ b/aoc/aoc.mk
@ -1,6 +1,4 @@
-BOARD_VENDOR_SEPOLICY_DIRS += \
-    device/google/gs-common/aoc/sepolicy \
-    device/google/gs-common/aoc/sepolicy/allowlist
+BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/aoc/sepolicy

 PRODUCT_PACKAGES += dump_aoc \
 		    aocd \
--- a/aoc/sepolicy/allowlist/aocxd_neverallow.te
+++ b/aoc/sepolicy/allowlist/aocxd_neverallow.te
@ -1,11 +0,0 @@
-# set up rule to control the access to aocxd
-neverallow {
-  domain
-  -hwservicemanager
-  -servicemanager
-  -vndservicemanager
-  -system_suspend_server
-  -dumpstate
-  -hal_audio_default
-  -aocxdallowdomain
-} aocxd:binder { call transfer };
--- a/aoc/sepolicy/allowlist/aocxdallowdomain.te
+++ b/aoc/sepolicy/allowlist/aocxdallowdomain.te
@ -1,6 +0,0 @@
-# Aocx AIDL service
-allow aocxdallowdomain aocx:service_manager find;
-
-binder_call(aocxdallowdomain, aocxd)
-# Allow aocxd asynchronous callback to aocxdallowdomain
-binder_call(aocxd, aocxdallowdomain)
--- a/aoc/sepolicy/allowlist/attributes
+++ b/aoc/sepolicy/allowlist/attributes
@ -1,2 +0,0 @@
-# Allow domain to access aocx HAL API
-attribute aocxdallowdomain;