Clean up not used sepolicy

Remove ufo/coreu/msync/mesa_acrn related items. Tracked-On: OAM-124121 Signed-off-by: ZhuChenyanX <[email protected]>
projectceladon · Sep 19, 2024 · b6b5a09 · b6b5a09
1 parent 9cb5390
commit b6b5a09
Show file tree

Hide file tree

Showing 64 changed files with 0 additions and 573 deletions.
diff --git a/codec2/msdk-codec2/codec2_hal_default.te b/codec2/msdk-codec2/codec2_hal_default.te
@@ -14,7 +14,6 @@ hal_client_domain(codec2_hal_default, hal_graphics_allocator)
 hal_server_domain(codec2_hal_default, hal_codec2)
 hal_server_domain(codec2_hal_default, hal_omx)
 
-binder_call(codec2_hal_default, coreu)
 binder_call(codec2_hal_default, appdomain)
 
 get_prop(codec2_hal_default, hwservicemanager_prop)
@@ -24,7 +23,6 @@ module_only(`aafd', `
    get_prop(codec2_hal_default, vendor_media_platform_prop)
 ')
 
-allow codec2_hal_default coreu_service:service_manager find;
 allow codec2_hal_default cameraserver_service:service_manager find;
 allow codec2_hal_default media_session_service:service_manager find;
 allow codec2_hal_default hal_codec2_hwservice:hwservice_manager find;

diff --git a/graphics/mesa/coreu.te b/graphics/mesa/coreu.te
diff --git a/graphics/mesa/file.te b/graphics/mesa/file.te
@@ -17,7 +17,4 @@ type sysfs_app_readable, fs_type, sysfs_type;
 
 typeattribute hal_graphics_allocator_default_tmpfs mlstrustedobject;
 
-#coreu data/vendor permission
-type coreu_data_file, file_type, data_file_type;
-
 type hal_graphics_composer_rw_file, file_type;
diff --git a/graphics/mesa/file_contexts b/graphics/mesa/file_contexts
@@ -3,9 +3,7 @@
 /dev/sw_sync                u:object_r:graphics_device:s0
 
 # system or vendor binaries
-(/system)?/vendor/bin/coreu    u:object_r:coreu_exec:s0
 (/system)?/vendor/bin/gfxd     u:object_r:gfxd_exec:s0
-(/system)?/vendor/bin/msync    u:object_r:msync_exec:s0
 
 # GFX
 /sys/devices/pci0000\:00/0000\:00\:02.0/resource0 u:object_r:sysfs_gfx:s0
@@ -25,6 +23,3 @@
 /(vendor|system/vendor)/lib(64)?/libmd\.so u:object_r:same_process_hal_file:s0
 /(vendor|system/vendor)/lib(64)?/hw/vulkan\.pastel\.so u:object_r:same_process_hal_file:s0
 /(vendor|system/vendor)/lib(64)?/dri(/.*)?     u:object_r:same_process_hal_file:s0
-
-#coreu /data/vendor permission
-/data/vendor/coreu(/.*)?       u:object_r:coreu_data_file:s0
diff --git a/graphics/mesa/hal_drm_widevine.te b/graphics/mesa/hal_drm_widevine.te
diff --git a/graphics/mesa/init.te b/graphics/mesa/init.te
diff --git a/graphics/mesa/mediacodec.te b/graphics/mesa/mediacodec.te
@@ -11,7 +11,6 @@ allow mediacodec graphics_device:dir search;
 allow mediacodec sysfs_app_readable:file r_file_perms;
 allow mediacodec hal_graphics_allocator_default_tmpfs:file { read write map };
 
-allow mediacodec coreu_service:service_manager find;
 allow mediacodec system_file:dir r_dir_perms;
 allow mediacodec gpu_device:dir r_dir_perms;
 allow mediacodec tmpfs:file { read write map };

diff --git a/graphics/mesa/mediaserver.te b/graphics/mesa/mediaserver.te
@@ -2,11 +2,6 @@
 # mediaserver
 #
 
-not_full_treble(`
-  binder_call(mediaserver, coreu)
-  allow mediaserver coreu_service:service_manager find;
-')
-
 #allow mediaserver tee_device:chr_file rw_file_perms;
 allow mediaserver proc_graphics:file r_file_perms;
 allow mediaserver graphics_device:chr_file rw_file_perms;

diff --git a/graphics/mesa/msync.te b/graphics/mesa/msync.te
diff --git a/graphics/mesa/surfaceflinger.te b/graphics/mesa/surfaceflinger.te
@@ -13,11 +13,6 @@ not_full_treble(`
 allow surfaceflinger cache_file:dir create_dir_perms;
 allow surfaceflinger cache_file:file create_file_perms;
 
-not_full_treble(`
-  binder_call(surfaceflinger, coreu)
-  allow surfaceflinger coreu_service:service_manager find;
-')
-
 allow surfaceflinger sysfs_videostatus:file { getattr w_file_perms };
 
 allow surfaceflinger hal_graphics_allocator_default_tmpfs:file { read write map };

diff --git a/graphics/mesa/vendor_init.te b/graphics/mesa/vendor_init.te
@@ -3,4 +3,3 @@ allow vendor_init vendor_file:system module_load;
 dontaudit vendor_init debugfs_tracing_instances:dir write;
 allow vendor_init mediaserver:process setsched;
 allow vendor_init self:udp_socket create;
-dontaudit vendor_init coreu_data_file:dir create_dir_perms;
diff --git a/graphics/mesa/vndservice.te b/graphics/mesa/vndservice.te
@@ -1,4 +1,2 @@
 type hwc_info_service,         vndservice_manager_type;
-type coreu_service,            vndservice_manager_type;
-type msync_service,            vndservice_manager_type;
 type gfxd_service,             vndservice_manager_type;
diff --git a/graphics/mesa/vndservice_contexts b/graphics/mesa/vndservice_contexts
@@ -1,4 +1,2 @@
 hwc.info    u:object_r:hwc_info_service:s0
-android.hardware.intel.msync              u:object_r:msync_service:s0
-android.hardware.intel.coreu              u:object_r:coreu_service:s0
 gfxd                                      u:object_r:gfxd_service:s0
diff --git a/graphics/mesa_acrn/adbd.te b/graphics/mesa_acrn/adbd.te
diff --git a/graphics/mesa_acrn/appdomain.te b/graphics/mesa_acrn/appdomain.te
diff --git a/graphics/mesa_acrn/bootanim.te b/graphics/mesa_acrn/bootanim.te
diff --git a/graphics/mesa_acrn/domain.te b/graphics/mesa_acrn/domain.te
diff --git a/graphics/mesa_acrn/dumpstate.te b/graphics/mesa_acrn/dumpstate.te
diff --git a/graphics/mesa_acrn/file.te b/graphics/mesa_acrn/file.te
diff --git a/graphics/mesa_acrn/file_contexts b/graphics/mesa_acrn/file_contexts
diff --git a/graphics/mesa_acrn/genfs_contexts b/graphics/mesa_acrn/genfs_contexts
diff --git a/graphics/mesa_acrn/gfxd.te b/graphics/mesa_acrn/gfxd.te
diff --git a/graphics/mesa_acrn/hal_graphics_allocator_default.te b/graphics/mesa_acrn/hal_graphics_allocator_default.te
diff --git a/graphics/mesa_acrn/hal_graphics_composer_default.te b/graphics/mesa_acrn/hal_graphics_composer_default.te
diff --git a/graphics/mesa_acrn/hal_memtrack_default.te b/graphics/mesa_acrn/hal_memtrack_default.te
diff --git a/graphics/mesa_acrn/hal_power_service.te b/graphics/mesa_acrn/hal_power_service.te
diff --git a/graphics/mesa_acrn/hdcpd.te b/graphics/mesa_acrn/hdcpd.te
diff --git a/graphics/mesa_acrn/mediacodec.te b/graphics/mesa_acrn/mediacodec.te
diff --git a/graphics/mesa_acrn/mediadrmserver.te b/graphics/mesa_acrn/mediadrmserver.te
diff --git a/graphics/mesa_acrn/mediaextractor.te b/graphics/mesa_acrn/mediaextractor.te
diff --git a/graphics/mesa_acrn/mediaserver.te b/graphics/mesa_acrn/mediaserver.te
diff --git a/graphics/mesa_acrn/shell.te b/graphics/mesa_acrn/shell.te
diff --git a/graphics/mesa_acrn/surfaceflinger.te b/graphics/mesa_acrn/surfaceflinger.te
diff --git a/graphics/mesa_acrn/system_server.te b/graphics/mesa_acrn/system_server.te
diff --git a/graphics/mesa_acrn/vndservice.te b/graphics/mesa_acrn/vndservice.te
diff --git a/graphics/mesa_acrn/vndservice_contexts b/graphics/mesa_acrn/vndservice_contexts
diff --git a/graphics/ufo_common/adbd.te b/graphics/ufo_common/adbd.te