clone sepolicy from gs101

s/gs101/gs201/g

Bug: 186836335
Test: Boot
Signed-off-by: Pat Tjin <pattjin@google.com>
Change-Id: Ifa0d083f7317c38eb02c8228c2804cbd4d5ee19f
This commit is contained in:
Pat Tjin 2021-05-20 17:51:26 -07:00
parent 703587e97c
commit d3a63de64b
172 changed files with 3678 additions and 0 deletions

20
ambient/exo_app.te Normal file
View file

@ -0,0 +1,20 @@
type exo_app, coredomain, domain;
app_domain(exo_app)
net_domain(exo_app)
allow exo_app app_api_service:service_manager find;
allow exo_app audioserver_service:service_manager find;
allow exo_app cameraserver_service:service_manager find;
allow exo_app mediaserver_service:service_manager find;
allow exo_app radio_service:service_manager find;
allow exo_app fwk_stats_service:service_manager find;
allow exo_app mediametrics_service:service_manager find;
allow exo_app gpu_device:dir search;
allow exo_app uhid_device:chr_file rw_file_perms;
binder_call(exo_app, statsd)
binder_use(exo_app)
get_prop(exo_app, device_config_runtime_native_boot_prop)

2
ambient/seapp_contexts Normal file
View file

@ -0,0 +1,2 @@
# Domain for Exo app
user=_app seinfo=platform name=com.google.pixel.exo domain=exo_app type=app_data_file levelFrom=all