audio: introduce sepolicy for hal audio ext service
Bug: 206738075
Test: build pass
Change-Id: I742566946d744c966443f30740adb8a3a4b3c00c
Signed-off-by: Jasmine Cha <chajasmine@google.com>
diff --git a/aoc/sepolicy/hal_audio_default.te b/aoc/sepolicy/hal_audio_default.te
index aa462bf..461875c 100644
--- a/aoc/sepolicy/hal_audio_default.te
+++ b/aoc/sepolicy/hal_audio_default.te
@@ -14,6 +14,8 @@
allow hal_audio_default hal_audio_ext_hwservice:hwservice_manager { find add };
+add_service(hal_audio_default, hal_audio_ext_service)
+
allow hal_audio_default amcs_device:file rw_file_perms;
allow hal_audio_default amcs_device:chr_file rw_file_perms;
allow hal_audio_default sysfs_pixelstats:file rw_file_perms;
diff --git a/aoc/sepolicy/service.te b/aoc/sepolicy/service.te
new file mode 100644
index 0000000..052558c
--- /dev/null
+++ b/aoc/sepolicy/service.te
@@ -0,0 +1,2 @@
+# Audio
+type hal_audio_ext_service, service_manager_type;
diff --git a/aoc/sepolicy/service_contexts b/aoc/sepolicy/service_contexts
new file mode 100644
index 0000000..1b5f301
--- /dev/null
+++ b/aoc/sepolicy/service_contexts
@@ -0,0 +1,2 @@
+# Audio
+vendor.google.whitechapel.audio.extension.IAudioExtension/default u:object_r:hal_audio_ext_service:s0