Consolidate SELinux for faceauth_rawimage

Per go/pixel-defrag, moves all related configuration from this
board-specific directory to a feature-specific directory:
  "vendor/google_devices/gs-common/proprietary/biometrics/face/" +
  "sepolicy/rawimage_heap"

Bug: 337889186
Bug: 391648492
Test: adb logcat | egrep "avc:\s+denied"
Flag: EXEMPT refactor
Change-Id: I2ee88197fe37ab276f603241520058f6ebee4a14
This commit is contained in:
Ilya Matyukhin 2025-01-23 19:15:21 +00:00
parent f02227eeb1
commit 1fd52733f7
2 changed files with 0 additions and 4 deletions

1
vendor/file.te vendored
View file

@ -54,4 +54,3 @@ type sysfs_ospm, sysfs_type, fs_type;
# GSA # GSA
type sysfs_gsa_log, sysfs_type, fs_type; type sysfs_gsa_log, sysfs_type, fs_type;
type sysfs_faceauth_rawimage_heap, sysfs_type, fs_type;

View file

@ -336,9 +336,6 @@ genfscon sysfs /devices/platform/17000000.aoc/control/udfps_get_osc_freq
genfscon sysfs /devices/platform/17000000.aoc/control/udfps_get_disp_freq u:object_r:sysfs_aoc_udfps:s0 genfscon sysfs /devices/platform/17000000.aoc/control/udfps_get_disp_freq u:object_r:sysfs_aoc_udfps:s0
genfscon sysfs /devices/platform/17000000.aoc/notify_timeout_aoc_status u:object_r:sysfs_aoc_notifytimeout:s0 genfscon sysfs /devices/platform/17000000.aoc/notify_timeout_aoc_status u:object_r:sysfs_aoc_notifytimeout:s0
# Faceauth
genfscon sysfs /sys/kernel/vendor_mm/gcma_heap/trusty:faceauth_rawimage_heap/max_usage_kb u:object_r:sysfs_faceauth_rawimage_heap:s0
# Bluetooth # Bluetooth
genfscon sysfs /devices/platform/155d0000.serial/uart_dbg u:object_r:sysfs_bt_uart:s0 genfscon sysfs /devices/platform/155d0000.serial/uart_dbg u:object_r:sysfs_bt_uart:s0