Allow virtmgr to talk to IVmCapabilitiesService HAL
Bug: 360102915
Test: m
Change-Id: I38d1c013a6bd9b168c03ac366c2b2ea1c57cac4e
diff --git a/private/virtualizationmanager.te b/private/virtualizationmanager.te
index 6e973d6..b743d46 100644
--- a/private/virtualizationmanager.te
+++ b/private/virtualizationmanager.te
@@ -153,3 +153,7 @@
# virtualizationmanager uses libselinux to check if VM is allowed to access requested
# tee services.
selinux_check_access(virtualizationmanager)
+
+# virtualizationmanager needs to talk to IVmCapabilitiesService HAL to allow specific VMs to
+# issue vendor-private smcs.
+hal_client_domain(virtualizationmanager, hal_vm_capabilities);