commit 24addd3553e50537b79f972afb060b65c704454f
author Matt Gilbride <mattgilbride@google.com> Tue Dec 17 00:30:46 2024 +0000
committer Matt Gilbride <mattgilbride@google.com> Tue Dec 17 00:52:40 2024 +0000
tree b12865d2b3031c15ca04e92f53c3a70b5b871b66
parent f38734e2878e423e519c83f5988890a46e4733eb

Fix: do not guard dynamic_instrumentation_service behind starting_at_board_api

move `type dynamic_instrumentation_service` from public/service.te to
private/service.te, and remove the guard. Remove the guard from the
related files in `private/` as well as from `202404.ignore.cil`.

Bug: 296108553
Test: TH
Flag: EXEMPT SEPolicy change that does not remove access
Change-Id: I48de5af50337ca282afcc844cd4b48654c8b7005

private/service_contexts

diff --git a/private/service_contexts b/private/service_contexts
index 1478e93..2e050eb 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -188,9 +188,7 @@
 app_binding                               u:object_r:app_binding_service:s0
 app_function                              u:object_r:app_function_service:s0
 app_hibernation                           u:object_r:app_hibernation_service:s0
-starting_at_board_api(202504, `
-    dynamic_instrumentation               u:object_r:dynamic_instrumentation_service:s0
-')
+dynamic_instrumentation                   u:object_r:dynamic_instrumentation_service:s0
 app_integrity                             u:object_r:app_integrity_service:s0
 app_prediction                            u:object_r:app_prediction_service:s0
 app_search                                u:object_r:app_search_service:s0