commit debbc5d37d4cee14ba543122f439340f9db4999a
author Treehugger Robot <android-test-infra-autosubmit@system.gserviceaccount.com> Mon Feb 03 16:19:56 2025 -0800
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Mon Feb 03 16:19:56 2025 -0800
tree ea94b1ef32c74daf68f7dd82275dea94f225256e
parent fb492f94aa73d2c4700ac10c487fff261b7d288d
parent 54e9fd295ca0b5c5dd371557dc01fdd3d61ac0e7

Merge "Stop allowing searching su keys" into main

private/domain.te

diff --git a/private/domain.te b/private/domain.te
index 7b448c3..8db40a5 100644
--- a/private/domain.te
+++ b/private/domain.te
@@ -532,12 +532,6 @@
 # TODO(384942085): Reduce the scope.
 allow domain kernel:key search;
 
-# For testing purposes, allow access to keys installed with su.
-# TODO(277916185): Remove since this shouldn't be needed anymore.
-userdebug_or_eng(`
-  allow domain su:key search;
-')
-
 # Allow access to linkerconfig file
 allow domain linkerconfig_file:dir search;
 allow domain linkerconfig_file:file r_file_perms;