pixel-sepolicy:debugpolicy: initial version
Bug: 194730972
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: Iec80b0b9e0a99875dcae478a5e63d94caae86767
diff --git a/debugpolicy/init_dpm.te b/debugpolicy/init_dpm.te
new file mode 100644
index 0000000..b91c561
--- /dev/null
+++ b/debugpolicy/init_dpm.te
@@ -0,0 +1,11 @@
+type init_dpm, domain;
+type init_dpm_exec, exec_type, vendor_file_type, file_type;
+
+init_daemon_domain(init_dpm)
+
+userdebug_or_eng(`
+allow init_dpm vendor_toolbox_exec:file execute_no_trans;
+allow init_dpm sysfs_dpm_variant:file r_file_perms;
+allow init_dpm block_device:dir search;
+allow init_dpm dpm_block_device:blk_file rw_file_perms;
+')