raviole: Import device specific sepolicy from gs101

Change-Id: I5fd3c1df500374290ad0b9b428b4f674d00745ba

device-oriole.mk

@@ -22,9 +22,6 @@ include device/google/gs-common/touch/stm/stm11.mk
 PRODUCT_COPY_FILES += \
 	device/google/gs101/conf/init.recovery.device.rc:$(TARGET_COPY_OUT_RECOVERY)/root/init.recovery.oriole.rc
 
-# Bluetooth sepolicy
-include device/google/gs101/sepolicy/oriole-sepolicy.mk
-
 # Bluetooth
 PRODUCT_PRODUCT_PROPERTIES += \
     persist.bluetooth.a2dp_aac.vbr_supported=true \

device-raven.mk

@@ -32,9 +32,6 @@ PRODUCT_COPY_FILES += \
 PRODUCT_PACKAGES += \
       UwbOverlayR4
 
-# Bluetooth sepolicy
-include device/google/gs101/sepolicy/raven-sepolicy.mk
-
 # Bluetooth
 PRODUCT_PRODUCT_PROPERTIES += \
     persist.bluetooth.a2dp_aac.vbr_supported=true \

oriole/BoardConfig.mk

@@ -22,7 +22,7 @@ TARGET_SCREEN_DENSITY := 420
 BOARD_KERNEL_CMDLINE += disable_dma32=on
 
 include device/google/gs101/BoardConfig-common.mk
-include device/google/gs101/sepolicy/oriole-sepolicy.mk
+include device/google/raviole/sepolicy/oriole-sepolicy.mk
 include device/google/gs101/wifi/BoardConfig-wifi.mk
 
 # Kernel modules

raven/BoardConfig.mk

@@ -22,7 +22,7 @@ TARGET_SCREEN_DENSITY := 560
 BOARD_KERNEL_CMDLINE += disable_dma32=on
 
 include device/google/gs101/BoardConfig-common.mk
-include device/google/gs101/sepolicy/raven-sepolicy.mk
+include device/google/raviole/sepolicy/raven-sepolicy.mk
 include device/google/gs101/wifi/BoardConfig-wifi.mk
 
 # Kernel modules

sepolicy/oriole-sepolicy.mk

@@ -0,0 +1,5 @@
+# Oriole only sepolicy
+BOARD_SEPOLICY_DIRS += device/google/gs101/sepolicy/oriole
+
+BOARD_VENDOR_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/vibrator/common
+BOARD_VENDOR_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/vibrator/cs40l25

sepolicy/oriole/euiccpixel_app.te

@@ -0,0 +1,6 @@
+# EuiccSupportPixel app
+
+userdebug_or_eng(`
+    allow euiccpixel_app sysfs_touch:dir search;
+')
+

sepolicy/oriole/grilservice_app.te

@@ -0,0 +1 @@
+allow grilservice_app hal_bluetooth_coexistence_service:service_manager find;

sepolicy/raven-sepolicy.mk

@@ -0,0 +1,5 @@
+# Ravne only sepolicy
+BOARD_SEPOLICY_DIRS += device/google/gs101/sepolicy/raven
+
+BOARD_VENDOR_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/vibrator/common
+BOARD_VENDOR_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/vibrator/cs40l25

sepolicy/raven/cccdk_timesync_app.te

@@ -0,0 +1 @@
+allow vendor_cccdktimesync_app hal_bluetooth_coexistence_service:service_manager find;

sepolicy/raven/euiccpixel_app.te

@@ -0,0 +1,6 @@
+# EuiccSupportPixel app
+
+userdebug_or_eng(`
+    allow euiccpixel_app sysfs_touch:dir search;
+')
+

sepolicy/raven/grilservice_app.te

@@ -0,0 +1 @@
+allow grilservice_app hal_bluetooth_coexistence_service:service_manager find;