Remove the su domain from -user builds.

Change-Id: I86f2f28f7c558b8e9a70e5aa9ebcfa8bf26f9ef7

Android.mk

@@ -10,6 +10,12 @@ POLICYVERS ?= 24
 MLS_SENS=1
 MLS_CATS=1024
 
+ifeq ($(TARGET_BUILD_VARIANT),user)
+	BOARD_SEPOLICY_IGNORE+=external/sepolicy/su.te
+else
+	BOARD_SEPOLICY_IGNORE+=external/sepolicy/su_user.te
+endif
+
 # Quick edge case error detection for BOARD_SEPOLICY_REPLACE.
 # Builds the singular path for each replace file.
 sepolicy_replace_paths :=

su_user.te

+# File types must be defined for file_contexts.
+type su_exec, file_type;
+
+# No allow rules