Remove binder_in_vendor_violators.
It's release blocking if devices specify it. Since none are used in-tree anymore, no reason to every use this again. Bug: 131617943 Test: grepping source/build (which validates this isn't used) Change-Id: I6f98ab9baed93e11403a10f3a0497c855d3a8695
This commit is contained in:
parent
21e31aa106
commit
5c0a0a8190
5 changed files with 3 additions and 8 deletions
|
@ -1 +0,0 @@
|
||||||
allow binder_in_vendor_violators binder_device:chr_file rw_file_perms;
|
|
|
@ -18,6 +18,8 @@
|
||||||
(type ffs_prop)
|
(type ffs_prop)
|
||||||
(type system_radio_prop)
|
(type system_radio_prop)
|
||||||
|
|
||||||
|
(typeattribute binder_in_vendor_violators)
|
||||||
|
|
||||||
(expandtypeattribute (DockObserver_service_30_0) true)
|
(expandtypeattribute (DockObserver_service_30_0) true)
|
||||||
(expandtypeattribute (IProxyService_service_30_0) true)
|
(expandtypeattribute (IProxyService_service_30_0) true)
|
||||||
(expandtypeattribute (accessibility_service_30_0) true)
|
(expandtypeattribute (accessibility_service_30_0) true)
|
||||||
|
|
|
@ -200,11 +200,6 @@ attribute coredomain;
|
||||||
attribute coredomain_socket;
|
attribute coredomain_socket;
|
||||||
expandattribute coredomain_socket false;
|
expandattribute coredomain_socket false;
|
||||||
|
|
||||||
# All vendor domains which violate the requirement of not using Binder
|
|
||||||
# TODO(b/35870313): Remove this once there are no violations
|
|
||||||
attribute binder_in_vendor_violators;
|
|
||||||
expandattribute binder_in_vendor_violators false;
|
|
||||||
|
|
||||||
# All vendor domains which violate the requirement of not using sockets for
|
# All vendor domains which violate the requirement of not using sockets for
|
||||||
# communicating with core components
|
# communicating with core components
|
||||||
# TODO(b/36577153): Remove this once there are no violations
|
# TODO(b/36577153): Remove this once there are no violations
|
||||||
|
|
|
@ -644,7 +644,6 @@ full_treble_only(`
|
||||||
neverallow {
|
neverallow {
|
||||||
domain
|
domain
|
||||||
-coredomain
|
-coredomain
|
||||||
-binder_in_vendor_violators # TODO(b/131617943) remove once all violators are gone
|
|
||||||
} {
|
} {
|
||||||
service_manager_type
|
service_manager_type
|
||||||
-vendor_service
|
-vendor_service
|
||||||
|
|
|
@ -294,7 +294,7 @@ def TestViolatorAttribute(attribute):
|
||||||
return ret
|
return ret
|
||||||
|
|
||||||
def TestViolatorAttributes():
|
def TestViolatorAttributes():
|
||||||
ret = TestViolatorAttribute("binder_in_vendor_violators")
|
ret = ""
|
||||||
ret += TestViolatorAttribute("socket_between_core_and_vendor_violators")
|
ret += TestViolatorAttribute("socket_between_core_and_vendor_violators")
|
||||||
ret += TestViolatorAttribute("vendor_executes_system_violators")
|
ret += TestViolatorAttribute("vendor_executes_system_violators")
|
||||||
return ret
|
return ret
|
||||||
|
|
Loading…
Reference in a new issue