From 52fe3a27037903a09ce867f59408f89f52a709a9 Mon Sep 17 00:00:00 2001
From: Imo Richard Umoren <iumoren@google.com>
Date: Wed, 7 Feb 2024 20:04:20 +0000
Subject: [PATCH] Add CHRE SELinux Permissions for Twoshay [Zuma Pro]

Adds permissions for chre socket to SELinux policy.
Used for the Wallaby nanoapp.

Bug: b/324278826
Test: Manually tested on zuma pro devices
Change-Id: Ied113002ec0650607f657cc47d183635916ae83e
---
 vendor/twoshay.te | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 vendor/twoshay.te

diff --git a/vendor/twoshay.te b/vendor/twoshay.te
new file mode 100644
index 0000000..48829f3
--- /dev/null
+++ b/vendor/twoshay.te
@@ -0,0 +1,10 @@
+# Allow ITouchContextService callback
+binder_call(twoshay, systemui_app)
+
+binder_call(twoshay, hal_radioext_default)
+
+# b/324278826
+unix_socket_connect(twoshay, chre, chre)
+# TODO(b/248615564): Remove above rule after CHRE multiclient HAL is launched.
+unix_socket_connect(twoshay, chre, hal_contexthub_default)
+allow twoshay self:capability2 block_suspend;
\ No newline at end of file