Move init.insmod.sh back to devices
Its permission is related to the module it loads,
and they vary from device to device
Bug: 168440095
Test: boot with no SELinux error log
Change-Id: I21d5c60c63fd0cb46e074d76934dccf53819683d
diff --git a/common/file.te b/common/file.te
index 967bb9e..ac1079a 100644
--- a/common/file.te
+++ b/common/file.te
@@ -1,4 +1 @@
type persist_file, file_type, vendor_persist_type;
-
-# kernel modules
-type vendor_kernel_modules, vendor_file_type, file_type;
diff --git a/common/file_contexts b/common/file_contexts
index 67fa1d7..738583d 100644
--- a/common/file_contexts
+++ b/common/file_contexts
@@ -1,7 +1,6 @@
/mnt/vendor/persist(/.*)? u:object_r:persist_file:s0
/persist(/.*)? u:object_r:persist_file:s0
-/vendor/bin/init\.insmod\.sh u:object_r:init-insmod-sh_exec:s0
/vendor/bin/grep u:object_r:vendor_toolbox_exec:s0
/vendor/bin/awk u:object_r:vendor_toolbox_exec:s0
/vendor/bin/cp u:object_r:vendor_toolbox_exec:s0
diff --git a/common/init-insmod-sh.te b/common/init-insmod-sh.te
deleted file mode 100644
index 16bc87c..0000000
--- a/common/init-insmod-sh.te
+++ /dev/null
@@ -1,19 +0,0 @@
-type init-insmod-sh, domain;
-type init-insmod-sh_exec, exec_type, vendor_file_type, file_type;
-
-init_daemon_domain(init-insmod-sh)
-
-allow init-insmod-sh vendor_toolbox_exec:file rx_file_perms;
-allow init-insmod-sh self:capability sys_module;
-allow init-insmod-sh vendor_kernel_modules:system module_load;
-allow init-insmod-sh kernel:key search;
-
-# modprobe needs sys_nice and setsched for driver threads
-allow init-insmod-sh self:capability sys_nice;
-allow init-insmod-sh kernel:process setsched;
-
-# modprobe need proc_modules
-allow init-insmod-sh proc_modules:file r_file_perms;
-
-# Set the vendor.all.modules.ready property
-set_prop(init-insmod-sh, vendor_device_prop)
diff --git a/common/property.te b/common/property.te
deleted file mode 100644
index 50f7b34..0000000
--- a/common/property.te
+++ /dev/null
@@ -1 +0,0 @@
-vendor_internal_prop(vendor_device_prop)
diff --git a/common/property_contexts b/common/property_contexts
deleted file mode 100644
index 8343ea5..0000000
--- a/common/property_contexts
+++ /dev/null
@@ -1,2 +0,0 @@
-vendor.all.modules.ready u:object_r:vendor_device_prop:s0
-vendor.all.devices.ready u:object_r:vendor_device_prop:s0