Drop upstream-vesperprofiled comparison clauses, just name pawletprofiled

This commit is contained in:
2026-07-25 00:58:51 -07:00
parent 2ff76cb35b
commit c305935ef6
3 changed files with 9 additions and 14 deletions
+3 -4
View File
@@ -25,10 +25,9 @@ allow pawlet_cache servicediscovery_service:service_manager find;
# Callers bind IPawletCacheService — see bg_upd.te's binder_call(bg_upd, pawlet_cache).
# Enterprise policy override, written by pawletprofiled, PawletOS's own fork
# of vesperprofiled (git.oxmc.me/PawletOS/profiled — see PolicyOverride.kt).
# Its ContentCacheHandler doesn't exist in stock/upstream vesperprofiled;
# write-side sepolicy rule lives in that fork's pawletprofiled.te.
# Enterprise policy override, written by pawletprofiled
# (git.oxmc.me/PawletOS/profiled — see PolicyOverride.kt). Write-side
# sepolicy rule lives in that repo's pawletprofiled.te.
type pawletcache_policy_file, file_type, data_file_type;
allow pawlet_cache pawletcache_policy_file:file { read open getattr };
allow pawlet_cache pawletcache_policy_file:dir { read open getattr search };
+3 -4
View File
@@ -22,10 +22,9 @@ object Constants {
"REPLACE_WITH_REAL_OXMC_ME_ED25519_PUBLIC_KEY_SPKI_BASE64"
// Enterprise override written at runtime by pawletprofiled's
// "content-cache" payload handler (MDM-pushed, mutable) — PawletOS's own
// fork of vesperprofiled, see pawletprofiled-config-schema and
// PolicyOverride.kt. Doesn't exist in stock/upstream vesperprofiled;
// PawletOS-fork-only. Wins over VENDOR_POLICY_PATH when both are present.
// "content-cache" payload handler (MDM-pushed, mutable) — see
// pawletprofiled-config-schema and PolicyOverride.kt.
// Wins over VENDOR_POLICY_PATH when both are present.
const val POLICY_OVERRIDE_PATH = "/data/misc/pawletcache/policy.json"
// OEM/vendor-baked default policy, shipped with the system image on the
+3 -6
View File
@@ -14,12 +14,9 @@ import java.io.File
* Discovery policy, resolved from three tiers, most specific wins:
*
* 1. [Constants.POLICY_OVERRIDE_PATH] — runtime override, written by
* pawletprofiled's "content-cache" MDM payload handler — PawletOS's own
* fork of vesperprofiled (see
* pawletprofiled-config-schema/schema/profile.schema.yml). Doesn't exist
* in stock/upstream vesperprofiled — this is PawletOS fork-specific
* code, added once that fork exists. Mutable, can arrive any time after
* first boot.
* pawletprofiled's "content-cache" MDM payload handler (see
* pawletprofiled-config-schema/schema/profile.schema.yml). Mutable, can
* arrive any time after first boot.
* 2. [Constants.VENDOR_POLICY_PATH] — OEM/vendor-baked default, shipped on
* the read-only vendor partition at build time (see
* android_packages_apps_PawletCache/vendor-config/README.md). This is