From d510a3608b6367531b347a3422d29d2220dccdf8 Mon Sep 17 00:00:00 2001
From: Joe Huang <joethhuang@google.com>
Date: Mon, 30 Oct 2023 17:36:01 +0800
Subject: [PATCH] Add sepolicy rules for gnss

Bug: 303789385
Test: GPS test on normal & factory builds
Change-Id: I140d2ec76f11b68b2e0abac2cc9278a82048814d
---
 vendor/gnss_check.te       | 3 +++
 vendor/hal_gnss_default.te | 1 +
 2 files changed, 4 insertions(+)

diff --git a/vendor/gnss_check.te b/vendor/gnss_check.te
index e19a8b9..31d0944 100644
--- a/vendor/gnss_check.te
+++ b/vendor/gnss_check.te
@@ -4,3 +4,6 @@ type gnss_check_exec, exec_type, vendor_file_type, file_type;
 init_daemon_domain(gnss_check);
 
 allow gnss_check vendor_toolbox_exec:file { execute_no_trans };
+
+set_prop(gnss_check, ctl_stop_prop);
+set_prop(gnss_check, ctl_start_prop);
diff --git a/vendor/hal_gnss_default.te b/vendor/hal_gnss_default.te
index 25fc30a..bf1a564 100644
--- a/vendor/hal_gnss_default.te
+++ b/vendor/hal_gnss_default.te
@@ -1,2 +1,3 @@
 binder_call(hal_gnss_default, gnssd);
 
+allow hal_gnss_default gnssd:unix_stream_socket connectto;