wifi_sniffer: add tcpdump related sepolicy am: 128a674db9 am: 6b2fcd9071
Original change: https://googleplex-android-review.googlesource.com/c/platform/hardware/google/pixel-sepolicy/+/19086048
Change-Id: I107c35312bb403e6c09996354604634d9f8c887c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/astd/astd.te b/astd/astd.te
index 9f29caa..815e832 100644
--- a/astd/astd.te
+++ b/astd/astd.te
@@ -1,15 +1,8 @@
# astd service
type astd, domain;
+type astd_exec, exec_type, file_type, system_file_type;
-# /vendor/bin/astc u:object_r:vendor_shell_exec:s0
-# system/sepolicy/public/vendor_shell.te
-# type vendor_shell_exec, exec_type, vendor_file_type, file_type;
-
-# /vendor/bin/astd u:object_r:vendor_toolbox_exec:s0
-# system/sepolicy/public/vendor_toolbox.te
-# type vendor_toolbox_exec, exec_type, vendor_file_type, file_type;
-
-type astd_exec, exec_type, vendor_file_type, file_type;
+typeattribute astd coredomain;
userdebug_or_eng(`
init_daemon_domain(astd)
diff --git a/astd/file_contexts b/astd/file_contexts
index 0df5774..17ac54c 100644
--- a/astd/file_contexts
+++ b/astd/file_contexts
@@ -1,3 +1,3 @@
-/vendor/bin/astc u:object_r:astd_exec:s0
-/vendor/bin/astd u:object_r:astd_exec:s0
+/system_ext/bin/astc u:object_r:astd_exec:s0
+/system_ext/bin/astd u:object_r:astd_exec:s0
diff --git a/input/genfs_contexts b/input/genfs_contexts
new file mode 100644
index 0000000..19f57be
--- /dev/null
+++ b/input/genfs_contexts
@@ -0,0 +1,2 @@
+# Touch
+genfscon sysfs /devices/virtual/goog_touch_interface u:object_r:sysfs_touch:s0
diff --git a/pixelstats/pixelstats_vendor.te b/pixelstats/pixelstats_vendor.te
index 7f34d10..75fd6fe 100644
--- a/pixelstats/pixelstats_vendor.te
+++ b/pixelstats/pixelstats_vendor.te
@@ -13,6 +13,7 @@
allow pixelstats_vendor sysfs_fs_f2fs:dir search;
allow pixelstats_vendor sysfs_fs_f2fs:file rw_file_perms;
get_prop(pixelstats_vendor, boottime_public_prop)
+get_prop(pixelstats_vendor, smart_idle_maint_enabled_prop)
allow pixelstats_vendor fwk_stats_service:service_manager find;
binder_call(pixelstats_vendor, stats_service_server)