Evolution-X-Tensor/device_google_gs-common
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revert "Set up access control rule for aocxd"

Browse source 
Revert submission 31133794-aocx_sepolicy

Reason for revert: http://b/391697603 build break

Reverted changes: /q/submissionid:31133794-aocx_sepolicy

Change-Id: I602d3ba880931a045146f216075f7baca513f0f3
This commit is contained in:
Zheng Pan 2025-01-22 14:59:13 -08:00 • committed by Android (Google) Code Review
parent cb1a8297c3
commit 728e059b69
4 changed files with 1 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

4
aoc/aoc.mk
View file

@ -1,6 +1,4 @@
BOARD_VENDOR_SEPOLICY_DIRS += \ BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/aoc/sepolicy
device/google/gs-common/aoc/sepolicy \
device/google/gs-common/aoc/sepolicy/allowlist
PRODUCT_PACKAGES += dump_aoc \ PRODUCT_PACKAGES += dump_aoc \
aocd \ aocd \

11
aoc/sepolicy/allowlist/aocxd_neverallow.te
View file

@ -1,11 +0,0 @@
# set up rule to control the access to aocxd
neverallow {
domain
-hwservicemanager
-servicemanager
-vndservicemanager
-system_suspend_server
-dumpstate
-hal_audio_default
-aocxdallowdomain
} aocxd:binder { call transfer };

6
aoc/sepolicy/allowlist/aocxdallowdomain.te
View file

@ -1,6 +0,0 @@
# Aocx AIDL service
allow aocxdallowdomain aocx:service_manager find;
binder_call(aocxdallowdomain, aocxd)
# Allow aocxd asynchronous callback to aocxdallowdomain
binder_call(aocxd, aocxdallowdomain)

2
aoc/sepolicy/allowlist/attributes
View file

@ -1,2 +0,0 @@
# Allow domain to access aocx HAL API
attribute aocxdallowdomain;