From 8a5026e68418ea504ad9bfe6280d8a669c94a109 Mon Sep 17 00:00:00 2001
From: Joe Huang <joethhuang@google.com>
Date: Mon, 30 Oct 2023 17:48:07 +0800
Subject: [PATCH] Add sepolicy rules for gnss

Bug: 303789385
Test: GPS test on normal & factory builds
Change-Id: I78eba237631edc1423e7c54d3b054135706d04f1
---
 gnss/gnss_check.te       | 3 +++
 gnss/hal_gnss_default.te | 1 +
 2 files changed, 4 insertions(+)

diff --git a/gnss/gnss_check.te b/gnss/gnss_check.te
index e19a8b97..31d0944f 100644
--- a/gnss/gnss_check.te
+++ b/gnss/gnss_check.te
@@ -4,3 +4,6 @@ type gnss_check_exec, exec_type, vendor_file_type, file_type;
 init_daemon_domain(gnss_check);
 
 allow gnss_check vendor_toolbox_exec:file { execute_no_trans };
+
+set_prop(gnss_check, ctl_stop_prop);
+set_prop(gnss_check, ctl_start_prop);
diff --git a/gnss/hal_gnss_default.te b/gnss/hal_gnss_default.te
index 25fc30a9..bf1a5645 100644
--- a/gnss/hal_gnss_default.te
+++ b/gnss/hal_gnss_default.te
@@ -1,2 +1,3 @@
 binder_call(hal_gnss_default, gnssd);
 
+allow hal_gnss_default gnssd:unix_stream_socket connectto;