Revert "Permissions for screencap saving files to /sdcard/"

am: f606a51e

Change-Id: If76f2528ca0edb4f0ad37a85fdc85356ab1e14ae

private/screencap.te

@@ -8,7 +8,7 @@ allow screencap ion_device:chr_file rw_file_perms;
 
 allow screencap adbd:fifo_file write;
 allow screencap adbd:fd use;
-allow screencap adbd:unix_stream_socket { read write getattr ioctl };
+allow screencap adbd:unix_stream_socket { read write };
 
 allow screencap shell_data_file:file write;
 allow screencap shell:fd use;
@@ -20,21 +20,7 @@ allow screencap dumpstate:unix_stream_socket { read write };
 binder_use(screencap)
 binder_call(screencap, surfaceflinger)
 allow screencap surfaceflinger_service:service_manager find;
-binder_call(screencap, system_server)
-allow screencap activity_service:service_manager find;
+allow screencap surfaceflinger:fd use;
 
 hwbinder_use(screencap)
 hal_client_domain(screencap, hal_graphics_allocator)
-
-allow screencap shell_exec:file rx_file_perms;
-allow screencap system_file:file execute_no_trans;
-
-allow screencap media_rw_data_file:dir rw_dir_perms;
-allow screencap media_rw_data_file:file rw_file_perms;
-allow screencap mnt_user_file:dir search;
-allow screencap mnt_user_file:lnk_file read;
-allow screencap sdcardfs:dir { search write };
-allow screencap sdcardfs:file { open write };
-allow screencap storage_file:dir search;
-allow screencap storage_file:lnk_file read;
-allow screencap tmpfs:dir search;

private/system_server.te

@@ -178,7 +178,6 @@ binder_call(system_server, gatekeeperd)
 binder_call(system_server, installd)
 binder_call(system_server, incidentd)
 binder_call(system_server, netd)
-binder_call(system_server, screencap)
 binder_call(system_server, wificond)
 binder_service(system_server)