confirmationui: Allow securedpud to access the systemsuspend HAL.
In order to use a wakelock, securedpud needs access to binder and the
system_suspend_service HAL.
Bug: 274851247
Test: manual, trigger TUI and check for AVC denials
Change-Id: Ibd27d32e092269f91d6557ebddcd27d4ccf1355a
diff --git a/confirmationui/securedpud.slider.te b/confirmationui/securedpud.slider.te
index fd553a3..e0d272f 100644
--- a/confirmationui/securedpud.slider.te
+++ b/confirmationui/securedpud.slider.te
@@ -3,6 +3,8 @@
init_daemon_domain(securedpud_slider)
+wakelock_use(securedpud_slider)
+
allow securedpud_slider dmabuf_heap_device:chr_file r_file_perms;
allow securedpud_slider ion_device:chr_file r_file_perms;
allow securedpud_slider tee_device:chr_file rw_file_perms;