Add authsecret service sepolicy
avc: denied { read } for comm="android.hardwar" name="vndbinder" dev="binder" ino=6 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { write } for comm="android.hardwar" name="vndbinder" dev="binder" ino=6 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { open } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { ioctl } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 ioctlcmd=0x6209 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { map } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { call } for comm="android.hardwar" scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:r:vndservicemanager:s0 tclass=binder permissive=1
avc: denied { call } for comm="android.hardwar" scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:r:servicemanager:s0 tclass=binder permissive=1
avc: denied { transfer } for comm="android.hardwar" scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:r:servicemanager:s0 tclass=binder permissive=1
avc: denied { call } for comm="binder:1286_7" scontext=u:r:system_server:s0 tcontext=u:r:hal_authsecret_citadel:s0 tclass=binder permissive=1
avc: denied { ioctl } for comm="android.hardwar" path="/dev/binderfs/vndbinder" dev="binder" ino=6 ioctlcmd=0x6201 scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { call } for comm="android.hardwar" scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:r:citadeld:s0 tclass=binder permissive=1
avc: denied { find } for pid=3023 uid=1064 name=android.hardware.citadel.ICitadeld scontext=u:r:hal_authsecret_citadel:s0 tcontext=u:object_r:citadeld_service:s0 tclass=service_manager permissive=0
Bug: 244746589
Change-Id: I7eaa8e3d74ab2ae874db23beff5317a9fe625ac7
2 files changed