Allow vmlauncher_app to create ptys to communicate with shell
* Allow vmlauncher_app to create pty/pts
* Allow vmlauncher_app to change permission of created pts
* Allow shell to read/write vmlauncher_app pts
adb shell can open and communicate with vmlauncher_app via the pts
device. VM console would be available on the pts.
Bug: 335362012
Test: adb shell -t microcom /dev/pts/0
Test: No new avc denials in logcat
Change-Id: If630235b486bf5ffffb45aeac3e29438029edb04
diff --git a/private/vmlauncher_app.te b/private/vmlauncher_app.te
index dcc4f55..f0f372b 100644
--- a/private/vmlauncher_app.te
+++ b/private/vmlauncher_app.te
@@ -16,3 +16,10 @@
allow vmlauncher_app virtualizationservice:binder call;
allow vmlauncher_app crosvm:binder { call transfer };
')
+
+userdebug_or_eng(`
+ # Create pty/pts and connect it to the guest terminal.
+ create_pty(vmlauncher_app)
+ # Allow other processes to access the pts.
+ allow vmlauncher_app vmlauncher_app_devpts:chr_file setattr;
+')