Rename fingerprint.extension.sh am: a1a9b464be am: fdee227b93 am: 323f858fa0 am: be82d97be3 am: 35a25d970b
Original change: https://android-review.googlesource.com/c/platform/hardware/google/pixel-sepolicy/+/2199946
Change-Id: Ic33a297b9b46404a0d87edb30bff121c634f62a0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/citadel/vndservice.te b/citadel/vndservice.te
index a756bce..880c09c 100644
--- a/citadel/vndservice.te
+++ b/citadel/vndservice.te
@@ -1,2 +1 @@
type citadeld_service, vndservice_manager_type;
-type hal_power_stats_vendor_service, vndservice_manager_type;
diff --git a/gs_watchdogd/file_contexts b/gs_watchdogd/file_contexts
new file mode 100644
index 0000000..22dd02b
--- /dev/null
+++ b/gs_watchdogd/file_contexts
@@ -0,0 +1,5 @@
+# Platform watchdogd
+/system_ext/bin/gs_watchdogd u:object_r:gs_watchdogd_exec:s0
+
+# Devices
+/dev/watchdog[0-9] u:object_r:watchdog_device:s0
diff --git a/gs_watchdogd/gs_watchdogd.te b/gs_watchdogd/gs_watchdogd.te
new file mode 100644
index 0000000..0823508
--- /dev/null
+++ b/gs_watchdogd/gs_watchdogd.te
@@ -0,0 +1,10 @@
+# gs_watchdogd seclabel is specified in init.<board>.rc
+type gs_watchdogd, domain, coredomain;
+type gs_watchdogd_exec, system_file_type, exec_type, file_type;
+
+typeattribute gs_watchdogd coredomain;
+init_daemon_domain(gs_watchdogd)
+
+allow gs_watchdogd watchdog_device:chr_file rw_file_perms;
+allow gs_watchdogd kmsg_device:chr_file rw_file_perms;
+allow gs_watchdogd sysfs:dir r_dir_perms;
diff --git a/powerstats/vndservice.te b/powerstats/vndservice.te
new file mode 100644
index 0000000..b4386f8
--- /dev/null
+++ b/powerstats/vndservice.te
@@ -0,0 +1 @@
+type hal_power_stats_vendor_service, vndservice_manager_type;