From 9019c55645dc79fd7e4b8e929aab526c78f57ecb Mon Sep 17 00:00:00 2001
From: Cody Heiner <codyheiner@google.com>
Date: Tue, 21 Feb 2023 15:38:49 -0800
Subject: [PATCH] =?UTF-8?q?Allow=20twoshay=20=E2=86=92=20systemui=5Fapp=20?=
 =?UTF-8?q?binder=20call=20for=20zuma=20devices?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Splitting system_app (b/264266705) caused the avc denial below,
causing b/269981541. This change allows the denied binder call
and fixes the bug.

Denial message:
avc: denied { call } for scontext=u:r:twoshay:s0 tcontext=u:r:systemui_app:s0:c230,c256,c512,c768 tclass=binder permissive=0

Test: flash P23 device with ag/21526491 along with this change
  → twoshay runs normally.

Fixes: 269981541
Change-Id: Ib3cf6f44b6288ed5c7c773e2ad670d2fd0aeee96
---
 vendor/twoshay.te | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 vendor/twoshay.te

diff --git a/vendor/twoshay.te b/vendor/twoshay.te
new file mode 100644
index 00000000..09cc98e1
--- /dev/null
+++ b/vendor/twoshay.te
@@ -0,0 +1,2 @@
+# Allow ITouchContextService callback
+binder_call(twoshay, systemui_app)