Revert "WFD : Adding policy exceptions in app domain for wfd"

This reverts commit 03866ca. The original commit was a stop-gap approach being taken to enable WFD in SEAndroid context. The current change is the final approach that is more attuned to security guidelines. CRs-Fixed: 781774 Change-Id: Id26ec982f4e6f581e820986d9d55229f922de2b5
TeslaOS · Jun 16, 2015 · f207533 · f207533
1 parent 1d7bc1d
commit f207533
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 13 deletions.
diff --git a/app.te b/app.te
@@ -209,11 +209,8 @@ neverallow { appdomain -bluetooth } self:capability2 *;
 neverallow appdomain dev_type:blk_file { read write };
 
 # Access to any of the following character devices.
-neverallow { appdomain -wfd_app } {
+neverallow appdomain {
     audio_device
-}:chr_file { read write };
-
-neverallow { appdomain } {
     camera_device
     dm_device
     radio_device
@@ -228,7 +225,7 @@ neverallow { appdomain -nfc } nfc_device:chr_file
     { read write };
 neverallow { appdomain -bluetooth } hci_attach_dev:chr_file
     { read write };
-neverallow { appdomain -wfd_app } tee_device:chr_file { read write };
+neverallow appdomain tee_device:chr_file { read write };
 
 # Privileged netlink socket interfaces.
 neverallow appdomain

diff --git a/seapp_contexts b/seapp_contexts
@@ -45,4 +45,3 @@ user=shell domain=shell type=shell_data_file
 user=_isolated domain=isolated_app
 user=_app seinfo=platform domain=platform_app type=app_data_file
 user=_app domain=untrusted_app type=app_data_file
-user=system domain=wfd_app seinfo=platform name=com.qualcomm.wfd.service:wfd_service type=system_data_file
diff --git a/wfd_app.te b/wfd_app.te