From 8587126f451e72bc1e10c722b9abc7049cfae9e3 Mon Sep 17 00:00:00 2001
From: Lei Ju <leiju@google.com>
Date: Wed, 27 Dec 2023 00:01:56 -0800
Subject: [PATCH] [zuma] Update chre sepolicy for socket connection

With multiclient HAL, the socket server domain changes from chre to
hal_contexthub_default.

Bug: 248615564
Test: updated the sepolicies and observed that avc violation logs
      disappears.
Change-Id: I4b2d27b436c9d81bd0d0cdc5b3c1540884c37fec
---
 vendor/twoshay.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/vendor/twoshay.te b/vendor/twoshay.te
index 0456028b..dc511ea2 100644
--- a/vendor/twoshay.te
+++ b/vendor/twoshay.te
@@ -6,4 +6,6 @@ binder_call(twoshay, hal_radioext_default)
 # b/315347346
 # b/314721681
 unix_socket_connect(twoshay, chre, chre)
+# TODO(b/248615564): Remove above rule after CHRE multiclient HAL is launched.
+unix_socket_connect(twoshay, chre, hal_contexthub_default)
 allow twoshay self:capability2 block_suspend;