Revert "[security][appmgr] check in package resolver allowlists"
This reverts commit bdbf0e083989a72edf99035c0cc415e33b8ebd9b.
Reason for revert: //src/security/policy:appmgr_package_resolver_allowlist_userdebug found its way into the dependency graph of an internal _user build: https://chrome-swarming.appspot.com/task?id=49d14e195ba1ae10&w=true - and caused a roll failure.
Original change's description:
> [security][appmgr] check in package resolver allowlists
>
> Also create /src/sys/security/policy directory.
>
> The userdebug allowlist will be superseded by a slightly more restrictive
> allowlist in user builds.
>
> Change-Id: I0893f5198d3883f164d6e3b3cd89aa236b575948
TBR=jamesr@google.com,dkrahn@google.com,computerdruid@google.com,ampearce@google.com
Change-Id: If659165d429e1127ae940dde1ebac34227c08723
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
diff --git a/products/core.gni b/products/core.gni
index 07ec552..dedbccd 100644
--- a/products/core.gni
+++ b/products/core.gni
@@ -63,7 +63,6 @@
"//src/identity/bin:core",
"//src/media/audio/bundles:audio_config",
"//src/recovery/factory_reset",
- "//src/security/policy:appmgr_package_resolver_allowlist_userdebug",
"//src/sys/appmgr",
"//src/sys/appmgr:appmgr_component_event_provider_allowlist",
"//src/sys/appmgr:appmgr_deprecated_shell_allowlist",
diff --git a/src/security/policy/BUILD.gn b/src/security/policy/BUILD.gn
deleted file mode 100644
index 5a20417..0000000
--- a/src/security/policy/BUILD.gn
+++ /dev/null
@@ -1,19 +0,0 @@
-# Copyright 2020 The Fuchsia Authors. All rights reserved.
-# Use of this source code is governed by a BSD-style license that can be
-# found in the LICENSE file.
-
-import("//build/config.gni")
-
-config_data("appmgr_package_resolver_allowlist_user") {
- for_pkg = "appmgr"
- sources = [ "package_resolver_allowlist_user.txt" ]
- outputs = [ "allowlist/package_resolver.txt" ]
-}
-
-# The primary difference from _user is support for pkgctl.
-config_data("appmgr_package_resolver_allowlist_userdebug") {
- for_pkg = "appmgr"
- sources = [ "package_resolver_allowlist_userdebug.txt" ]
- outputs = [ "allowlist/package_resolver.txt" ]
- deps = [ "//build/images:non_production_tag" ] # Ensure exclusion from _user builds.
-}
diff --git a/src/security/policy/OWNERS b/src/security/policy/OWNERS
deleted file mode 100644
index bc8dec1..0000000
--- a/src/security/policy/OWNERS
+++ /dev/null
@@ -1,4 +0,0 @@
-jln@google.com
-dkrahn@google.com
-ampearce@google.com
-per-file package_resolver_allowlist_* = file: /src/sys/pkg/OWNERS
diff --git a/src/security/policy/package_resolver_allowlist_user.txt b/src/security/policy/package_resolver_allowlist_user.txt
deleted file mode 100644
index 20b0c0d..0000000
--- a/src/security/policy/package_resolver_allowlist_user.txt
+++ /dev/null
@@ -1,8 +0,0 @@
-fuchsia-pkg://fuchsia.com/system_updater#meta/system_updater.cmx
-fuchsia-pkg://fuchsia.com/system-update-checker#meta/system-update-checker.cmx
-fuchsia-pkg://fuchsia.com/component_manager#meta/component_manager_sfw.cmx
-fuchsia-pkg://fuchsia.com/system_updater_isolated#meta/system_updater_isolated.cmx
-# Minimizing this list is tracked in fxb/43629. At least the following will be removed.
-fuchsia-pkg://fuchsia.com/amberctl#meta/amberctl.cmx
-fuchsia-pkg://fuchsia.com/pkgctl#meta/pkgctl.cmx
-fuchsia-pkg://fuchsia.com/system-update-checker#meta/system-update-checker-for-integration-test.cmx
diff --git a/src/security/policy/package_resolver_allowlist_userdebug.txt b/src/security/policy/package_resolver_allowlist_userdebug.txt
deleted file mode 100644
index 1e45579..0000000
--- a/src/security/policy/package_resolver_allowlist_userdebug.txt
+++ /dev/null
@@ -1,18 +0,0 @@
-# TODO: don't block components started in a testenv from getting resolver access
-# if they're not interacting with the privileged capability. Until then, this
-# list can grow.
-fuchsia-pkg://fuchsia.com/system_updater#meta/system_updater.cmx
-fuchsia-pkg://fuchsia.com/amberctl#meta/amberctl.cmx
-fuchsia-pkg://fuchsia.com/pkgctl#meta/pkgctl.cmx
-fuchsia-pkg://fuchsia.com/system-update-checker#meta/system-update-checker.cmx
-fuchsia-pkg://fuchsia.com/system-update-checker#meta/system-update-checker-for-integration-test.cmx
-fuchsia-pkg://fuchsia.com/system-update-checker-integration-tests#meta/system-update-checker-for-integration-test.cmx
-fuchsia-pkg://fuchsia.com/component_manager#meta/component_manager_sfw.cmx
-fuchsia-pkg://fuchsia.com/component_manager_panic_test#meta/component_manager_panic_test.cmx
-fuchsia-pkg://fuchsia.com/shutdown_integration_test#meta/shutdown_integration_test.cmx
-fuchsia-pkg://fuchsia.com/dash_test#meta/dash_test.cmx
-fuchsia-pkg://fuchsia.com/amberctl-tests#meta/amberctl.cmx
-fuchsia-pkg://fuchsia.com/system-update-checker-integration-tests#meta/system-update-checker-integration-test.cmx
-fuchsia-pkg://fuchsia.com/pkgctl-integration-tests#meta/pkgctl-integration-test.cmx
-fuchsia-pkg://fuchsia.com/system-updater-integration-tests#meta/system_updater_isolated.cmx
-fuchsia-pkg://fuchsia.com/pkgctl-integration-tests#meta/pkgctl.cmx
