Merge "Revert "Set up access control rule for aocxd"" into main

2025-01-24 02:32:27 -08:00 · 2025-01-24 02:32:27 -08:00 · 861f6bcf77
commit 861f6bcf77
parent f329ce7a91 728e059b69
4 changed files with 1 additions and 22 deletions
--- a/aoc/aoc.mk
+++ b/aoc/aoc.mk
@ -1,6 +1,4 @@
-BOARD_VENDOR_SEPOLICY_DIRS += \
-    device/google/gs-common/aoc/sepolicy \
-    device/google/gs-common/aoc/sepolicy/allowlist
+BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/aoc/sepolicy

 PRODUCT_PACKAGES += dump_aoc \
 		    aocd \
--- a/aoc/sepolicy/allowlist/aocxd_neverallow.te
+++ b/aoc/sepolicy/allowlist/aocxd_neverallow.te
@ -1,11 +0,0 @@
-# set up rule to control the access to aocxd
-neverallow {
-  domain
-  -hwservicemanager
-  -servicemanager
-  -vndservicemanager
-  -system_suspend_server
-  -dumpstate
-  -hal_audio_default
-  -aocxdallowdomain
-} aocxd:binder { call transfer };
--- a/aoc/sepolicy/allowlist/aocxdallowdomain.te
+++ b/aoc/sepolicy/allowlist/aocxdallowdomain.te
@ -1,6 +0,0 @@
-# Aocx AIDL service
-allow aocxdallowdomain aocx:service_manager find;
-
-binder_call(aocxdallowdomain, aocxd)
-# Allow aocxd asynchronous callback to aocxdallowdomain
-binder_call(aocxd, aocxdallowdomain)
--- a/aoc/sepolicy/allowlist/attributes
+++ b/aoc/sepolicy/allowlist/attributes
@ -1,2 +0,0 @@
-# Allow domain to access aocx HAL API
-attribute aocxdallowdomain;