diff --git a/sepolicy/pawlet_cache.te b/sepolicy/pawlet_cache.te index 8ed5f8b..ccc1d54 100644 --- a/sepolicy/pawlet_cache.te +++ b/sepolicy/pawlet_cache.te @@ -25,10 +25,9 @@ allow pawlet_cache servicediscovery_service:service_manager find; # Callers bind IPawletCacheService — see bg_upd.te's binder_call(bg_upd, pawlet_cache). -# Enterprise policy override, written by pawletprofiled, PawletOS's own fork -# of vesperprofiled (git.oxmc.me/PawletOS/profiled — see PolicyOverride.kt). -# Its ContentCacheHandler doesn't exist in stock/upstream vesperprofiled; -# write-side sepolicy rule lives in that fork's pawletprofiled.te. +# Enterprise policy override, written by pawletprofiled +# (git.oxmc.me/PawletOS/profiled — see PolicyOverride.kt). Write-side +# sepolicy rule lives in that repo's pawletprofiled.te. type pawletcache_policy_file, file_type, data_file_type; allow pawlet_cache pawletcache_policy_file:file { read open getattr }; allow pawlet_cache pawletcache_policy_file:dir { read open getattr search }; diff --git a/src/os/pawlet/cache/Constants.kt b/src/os/pawlet/cache/Constants.kt index b8a19df..a1af905 100644 --- a/src/os/pawlet/cache/Constants.kt +++ b/src/os/pawlet/cache/Constants.kt @@ -22,10 +22,9 @@ object Constants { "REPLACE_WITH_REAL_OXMC_ME_ED25519_PUBLIC_KEY_SPKI_BASE64" // Enterprise override written at runtime by pawletprofiled's - // "content-cache" payload handler (MDM-pushed, mutable) — PawletOS's own - // fork of vesperprofiled, see pawletprofiled-config-schema and - // PolicyOverride.kt. Doesn't exist in stock/upstream vesperprofiled; - // PawletOS-fork-only. Wins over VENDOR_POLICY_PATH when both are present. + // "content-cache" payload handler (MDM-pushed, mutable) — see + // pawletprofiled-config-schema and PolicyOverride.kt. + // Wins over VENDOR_POLICY_PATH when both are present. const val POLICY_OVERRIDE_PATH = "/data/misc/pawletcache/policy.json" // OEM/vendor-baked default policy, shipped with the system image on the diff --git a/src/os/pawlet/cache/PolicyOverride.kt b/src/os/pawlet/cache/PolicyOverride.kt index 1d81825..22fe129 100644 --- a/src/os/pawlet/cache/PolicyOverride.kt +++ b/src/os/pawlet/cache/PolicyOverride.kt @@ -14,12 +14,9 @@ import java.io.File * Discovery policy, resolved from three tiers, most specific wins: * * 1. [Constants.POLICY_OVERRIDE_PATH] — runtime override, written by - * pawletprofiled's "content-cache" MDM payload handler — PawletOS's own - * fork of vesperprofiled (see - * pawletprofiled-config-schema/schema/profile.schema.yml). Doesn't exist - * in stock/upstream vesperprofiled — this is PawletOS fork-specific - * code, added once that fork exists. Mutable, can arrive any time after - * first boot. + * pawletprofiled's "content-cache" MDM payload handler (see + * pawletprofiled-config-schema/schema/profile.schema.yml). Mutable, can + * arrive any time after first boot. * 2. [Constants.VENDOR_POLICY_PATH] — OEM/vendor-baked default, shipped on * the read-only vendor partition at build time (see * android_packages_apps_PawletCache/vendor-config/README.md). This is