Stop allowing searching su keys
There should be no component in AOSP that still needs this now. Remove
the rule.
Flag: EXEMPT removing deprecate_fsv_sig
Test: TH
Bug: 277916185
Change-Id: I6405ed10bef4cc401bafe331ab510f9bd67972d2
diff --git a/private/domain.te b/private/domain.te
index 618258c..3cdf404 100644
--- a/private/domain.te
+++ b/private/domain.te
@@ -532,12 +532,6 @@
# TODO(384942085): Reduce the scope.
allow domain kernel:key search;
-# For testing purposes, allow access to keys installed with su.
-# TODO(277916185): Remove since this shouldn't be needed anymore.
-userdebug_or_eng(`
- allow domain su:key search;
-')
-
# Allow access to linkerconfig file
allow domain linkerconfig_file:dir search;
allow domain linkerconfig_file:file r_file_perms;