summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTreehugger Robot <treehugger-gerrit@google.com>2022-10-26 18:53:47 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2022-10-26 18:53:47 +0000
commit18001a5a38dc8d47ca58902967ca16195e617f80 (patch)
treeb44ba3e9a46381877af056e7eda4430a0d7ef6ea
parentb562bd80baa1bacfc782d4490c060ee8aee2a8c6 (diff)
parent37f8a3c3a0d60257eba43cace85a0ec625aa89db (diff)
downloadcoral-sepolicy-main-16k.tar.gz
Merge "Remove legacy support for FaceDebugService" am: 37f8a3c3a0main-16k
Original change: https://android-review.googlesource.com/c/device/google/coral-sepolicy/+/2241704 Change-Id: Ie59894a0231c703b89e5e9dc62b5a765abafa78d Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r--vendor/google/hal_face_default.te5
-rw-r--r--vendor/google/seapp_contexts3
2 files changed, 1 insertions, 7 deletions
diff --git a/vendor/google/hal_face_default.te b/vendor/google/hal_face_default.te
index 67582a5..a55c48f 100644
--- a/vendor/google/hal_face_default.te
+++ b/vendor/google/hal_face_default.te
@@ -37,13 +37,10 @@ allow hal_face_default mnt_vendor_file:dir search;
allow hal_face_default system_app:fd use;
-# Grant incidentd and FaceDebugService access to the face HAL debug images
+# Grant incidentd access to the face HAL debug images
userdebug_or_eng(`
allow hal_face_default incidentd:fd use;
allow hal_face_default incidentd:fifo_file write;
-
- allow hal_face_default face_debug:fd use;
- allow hal_face_default face_debug:fifo_file write;
')
get_prop(hal_face_default, camera_config_prop)
diff --git a/vendor/google/seapp_contexts b/vendor/google/seapp_contexts
index 22a72f2..d65c4e7 100644
--- a/vendor/google/seapp_contexts
+++ b/vendor/google/seapp_contexts
@@ -17,9 +17,6 @@ user=_app seinfo=platform name=com.android.hbmsvmanager domain=hbmsvmanager_app
# Domain for GoogleCBRS app
user=_app seinfo=platform name=com.google.googlecbrs domain=cbrs_setup_app type=app_data_file levelFrom=user
-# Domain for FaceDebugService
-user=_app seinfo=platform name=com.google.android.facedebug domain=face_debug type=app_data_file levelFrom=all
-
# Domain for Touch app
user=_app seinfo=platform name=com.google.touch.touchinspector domain=google_touch_app type=app_data_file levelFrom=user