Merge "SEPolicy updates for DeviceConfig Service." am: b1553b72a8 am: 4da093fe61
am: 5f12b6426b
Change-Id: Ic0a2419e140465a06c3911b6eed1f153d6df66c0
diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil
index 0d6cb67..71069c9 100644
--- a/private/compat/28.0/28.0.ignore.cil
+++ b/private/compat/28.0/28.0.ignore.cil
@@ -21,8 +21,9 @@
cpu_variant_prop
dev_cpu_variant
device_config_boot_count_prop
- device_config_reset_performed_prop
device_config_flags_health_check_prop
+ device_config_reset_performed_prop
+ device_config_service
face_service
face_vendor_data_file
fastbootd
diff --git a/private/service_contexts b/private/service_contexts
index 323f84a..8fcc9f5 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -39,6 +39,7 @@
cpuinfo u:object_r:cpuinfo_service:s0
crossprofileapps u:object_r:crossprofileapps_service:s0
dbinfo u:object_r:dbinfo_service:s0
+device_config u:object_r:device_config_service:s0
device_policy u:object_r:device_policy_service:s0
device_identifiers u:object_r:device_identifiers_service:s0
deviceidle u:object_r:deviceidle_service:s0
diff --git a/public/service.te b/public/service.te
index c71db05..e883c75 100644
--- a/public/service.te
+++ b/public/service.te
@@ -71,6 +71,7 @@
type coverage_service, system_server_service, service_manager_type;
type cpuinfo_service, system_api_service, system_server_service, service_manager_type;
type dbinfo_service, system_api_service, system_server_service, service_manager_type;
+type device_config_service, system_server_service, service_manager_type;
type device_policy_service, app_api_service, system_server_service, service_manager_type;
type deviceidle_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type device_identifiers_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;