commit 0e903620a5ffa0c62b81e45e222ebd261ce1931a
author Kalesh Singh <kaleshsingh@google.com> Tue Jul 20 15:13:38 2021 +0000
committer Kalesh Singh <kaleshsingh@google.com> Tue Jul 20 18:54:55 2021 +0000
tree 24b70e0cf9a6b1502057a9e1247fc67d5db3034d
parent 6b4f91cbf0f1eeb3f6247eb7c3da03bb849364b9

sepolicy: Serve suspend AIDL hal from system_suspend

Allow system_suspend to server the suspend AIDL hal service.

Bug: 170260236
Test: Check logcat for supend avc denials
Change-Id: Ie4c07e2e8d75fd4b12e55db15511060e09be59cf

private/service_contexts

diff --git a/private/service_contexts b/private/service_contexts
index f8c1607..61db2d1 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -21,6 +21,7 @@
 android.hardware.weaver.IWeaver/default                              u:object_r:hal_weaver_service:s0
 android.frameworks.stats.IStats/default                              u:object_r:fwk_stats_service:s0
 android.system.keystore2.IKeystoreService/default                    u:object_r:keystore_service:s0
+android.system.suspend.ISystemSuspend/default                        u:object_r:hal_system_suspend_service:s0
 
 accessibility                             u:object_r:accessibility_service:s0
 account                                   u:object_r:account_service:s0