summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJared Duke <jdduke@google.com>2022-10-06 09:00:16 -0700
committerJared Duke <jdduke@google.com>2022-10-06 09:00:16 -0700
commit736367dd5f6ce2eb180954f6a1276b1f06853a34 (patch)
tree300ae052e22a8bcf803ac717b15754ec2dfe3e68
parentf94cf91bfe3d4e788850fb948885ce12cadfe511 (diff)
downloadcoral-sepolicy-736367dd5f6ce2eb180954f6a1276b1f06853a34.tar.gz
Remove legacy support for FaceDebugService
The SE and HAL configurations are no longer needed, so remove them. Test: m + presubmit Bug: 203241149 Change-Id: Id707000cd61a17abb42a9543f389bba7363fc7de
-rw-r--r--vendor/google/hal_face_default.te5
-rw-r--r--vendor/google/seapp_contexts3
2 files changed, 1 insertions, 7 deletions
diff --git a/vendor/google/hal_face_default.te b/vendor/google/hal_face_default.te
index 67582a5..a55c48f 100644
--- a/vendor/google/hal_face_default.te
+++ b/vendor/google/hal_face_default.te
@@ -37,13 +37,10 @@ allow hal_face_default mnt_vendor_file:dir search;
allow hal_face_default system_app:fd use;
-# Grant incidentd and FaceDebugService access to the face HAL debug images
+# Grant incidentd access to the face HAL debug images
userdebug_or_eng(`
allow hal_face_default incidentd:fd use;
allow hal_face_default incidentd:fifo_file write;
-
- allow hal_face_default face_debug:fd use;
- allow hal_face_default face_debug:fifo_file write;
')
get_prop(hal_face_default, camera_config_prop)
diff --git a/vendor/google/seapp_contexts b/vendor/google/seapp_contexts
index 22a72f2..d65c4e7 100644
--- a/vendor/google/seapp_contexts
+++ b/vendor/google/seapp_contexts
@@ -17,9 +17,6 @@ user=_app seinfo=platform name=com.android.hbmsvmanager domain=hbmsvmanager_app
# Domain for GoogleCBRS app
user=_app seinfo=platform name=com.google.googlecbrs domain=cbrs_setup_app type=app_data_file levelFrom=user
-# Domain for FaceDebugService
-user=_app seinfo=platform name=com.google.android.facedebug domain=face_debug type=app_data_file levelFrom=all
-
# Domain for Touch app
user=_app seinfo=platform name=com.google.touch.touchinspector domain=google_touch_app type=app_data_file levelFrom=user