Move turbo_adapter sepolicy to system_ext am: 9f4865ff57 am: faacbe722a am: 77f03f01cf
Original change: https://googleplex-android-review.googlesource.com/c/platform/hardware/google/pixel-sepolicy/+/24364935
Change-Id: I610015becf03a212151db939d41a8a5576699fb3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/citadel/citadeld.te b/citadel/citadeld.te
index 9490258..959704b 100644
--- a/citadel/citadeld.te
+++ b/citadel/citadeld.te
@@ -18,3 +18,6 @@
binder_call(citadeld, stats_service_server)
allow citadeld fwk_stats_service:service_manager find;
binder_use(citadeld)
+
+# Let citadeld set property
+set_prop(citadeld, vendor_nos_citadel_version);
diff --git a/citadel/property.te b/citadel/property.te
new file mode 100644
index 0000000..2e1c4ec
--- /dev/null
+++ b/citadel/property.te
@@ -0,0 +1 @@
+vendor_internal_prop(vendor_nos_citadel_version)
diff --git a/citadel/property_contexts b/citadel/property_contexts
new file mode 100644
index 0000000..835de17
--- /dev/null
+++ b/citadel/property_contexts
@@ -0,0 +1 @@
+vendor.nos.citadel.version u:object_r:vendor_nos_citadel_version:s0
diff --git a/common/vendor/te_macros b/common/vendor/te_macros
index c9a9c04..99873fe 100644
--- a/common/vendor/te_macros
+++ b/common/vendor/te_macros
@@ -12,6 +12,7 @@
allow $1 dumpstate:fd use;
allow $1 dumpstate:fifo_file { write getattr };
allow $1 hal_dumpstate_default:fd use;
+allow hal_dumpstate_default $1:process { sigkill signal };
allow $1 shell_data_file:file { write getattr };
')