From b370d9d2c38b9fafa30514e5808bdfd25dbdbd35 Mon Sep 17 00:00:00 2001
From: andychou <andychou@google.com>
Date: Fri, 9 Apr 2021 17:06:51 +0800
Subject: [PATCH] Remove sepolicy of Wirecutter

Bug: 184886787
Test: build pass
Change-Id: Ibe539d31dc70cc4ea478f074ef4bf75d918bcb67
---
 ambient/exo_wirecutter_app.te | 10 ----------
 ambient/keys.conf             |  2 --
 ambient/mac_permissions.xml   | 26 --------------------------
 ambient/seapp_contexts        |  3 ---
 4 files changed, 41 deletions(-)
 delete mode 100644 ambient/exo_wirecutter_app.te
 delete mode 100644 ambient/keys.conf
 delete mode 100644 ambient/mac_permissions.xml

diff --git a/ambient/exo_wirecutter_app.te b/ambient/exo_wirecutter_app.te
deleted file mode 100644
index 1450b4cc..00000000
--- a/ambient/exo_wirecutter_app.te
+++ /dev/null
@@ -1,10 +0,0 @@
-type exo_wirecutter_app, domain, coredomain;
-
-app_domain(exo_wirecutter_app)
-
-allow exo_wirecutter_app app_api_service:service_manager find;
-allow exo_wirecutter_app fwk_stats_hwservice:hwservice_manager find;
-allow exo_wirecutter_app gpu_device:dir search;
-binder_call(exo_wirecutter_app, statsd)
-allow exo_wirecutter_app fwk_stats_service:service_manager find;
-binder_use(exo_wirecutter_app)
diff --git a/ambient/keys.conf b/ambient/keys.conf
deleted file mode 100644
index 9be4f7f5..00000000
--- a/ambient/keys.conf
+++ /dev/null
@@ -1,2 +0,0 @@
-[@EXO_WIRECUTTER]
-ALL : vendor/google/dev-keystore/certs/com_google_pixel_wirecutter/com_google_pixel_wirecutter.x509.pem
diff --git a/ambient/mac_permissions.xml b/ambient/mac_permissions.xml
deleted file mode 100644
index d1ba106a..00000000
--- a/ambient/mac_permissions.xml
+++ /dev/null
@@ -1,26 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<policy>
-
-<!--
-
-    * A signature is a hex encoded X.509 certificate or a tag defined in
-      keys.conf and is required for each signer tag.
-    * A signer tag may contain a seinfo tag and multiple package stanzas.
-    * A default tag is allowed that can contain policy for all apps not signed with a
-      previously listed cert. It may not contain any inner package stanzas.
-    * Each signer/default/package tag is allowed to contain one seinfo tag. This tag
-      represents additional info that each app can use in setting a SELinux security
-      context on the eventual process.
-    * When a package is installed the following logic is used to determine what seinfo
-      value, if any, is assigned.
-      - All signatures used to sign the app are checked first.
-      - If a signer stanza has inner package stanzas, those stanza will be checked
-        to try and match the package name of the app. If the package name matches
-        then that seinfo tag is used. If no inner package matches then the outer
-        seinfo tag is assigned.
-      - The default tag is consulted last if needed.
--->
-    <signer signature="@EXO_WIRECUTTER" >
-        <seinfo value="wirecutter" />
-    </signer>
-</policy>
diff --git a/ambient/seapp_contexts b/ambient/seapp_contexts
index 4ee10805..8024688c 100644
--- a/ambient/seapp_contexts
+++ b/ambient/seapp_contexts
@@ -1,5 +1,2 @@
 # Domain for Exo app
 user=_app seinfo=platform name=com.google.pixel.exo domain=exo_app type=app_data_file levelFrom=all
-
-# Domain for Exo Wirecutter app
-user=_app seinfo=wirecutter name=com.google.pixel.wirecutter domain=exo_wirecutter_app type=app_data_file levelFrom=all