Add Flipendo SELinux policy.
The goal of the change is to give Flipendo (go/flipendo) access to Westworld logging service. And because Flipendo domain is new, app_api_service:service_manager and gpuservice permissions that previously was inherited from platform_app is added as well.
Bug: 153154680
Test: make and flash an android build, confirm that there is no "SELinux: avc: denied" errors for Flipendo
Change-Id: I6a945135b5107c39499be0378ca210ac70aaf95d
diff --git a/flipendo/flipendo.te b/flipendo/flipendo.te
new file mode 100644
index 0000000..8955c64
--- /dev/null
+++ b/flipendo/flipendo.te
@@ -0,0 +1,9 @@
+type flipendo, domain, coredomain;
+
+app_domain(flipendo)
+
+# Access to Westworld logging service
+allow flipendo fwk_stats_hwservice:hwservice_manager find;
+binder_call(flipendo, stats_service_server)
+
+allow flipendo app_api_service:service_manager find;
\ No newline at end of file
diff --git a/flipendo/seapp_contexts b/flipendo/seapp_contexts
new file mode 100644
index 0000000..773a179
--- /dev/null
+++ b/flipendo/seapp_contexts
@@ -0,0 +1,2 @@
+# Domain for Flipendo
+user=_app seinfo=platform name=com.google.android.flipendo domain=flipendo type=app_data_file levelFrom=all
\ No newline at end of file