commit 187cb2c64c7cdce6653a7cc36d3508ad53e15587
author Kelvin Zhang <zhangkelvin@google.com> Wed Mar 30 20:05:23 2022 -0700
committer Kelvin Zhang <zhangkelvin@google.com> Tue Jun 07 16:26:19 2022 -0700
tree 283c0a560a6ce58a927e77da0ae81efbe29540c6
parent c53f08e3b304437db2f4685c3811fac7ee722e8b

Add sepolicy for IBootControl AIDL

Test: th
Bug: 227536004
Change-Id: I1206b4aae1aab904a76836c893ee583b5ce54624

private/update_engine.te

diff --git a/private/update_engine.te b/private/update_engine.te
index c3f575f..8d6341c 100644
--- a/private/update_engine.te
+++ b/private/update_engine.te
@@ -30,3 +30,7 @@
 # capex decompression
 allow update_engine apex_service:service_manager find;
 binder_call(update_engine, apexd)
+
+# let this domain use the hal service
+binder_use(update_engine)
+hal_client_domain(update_engine, hal_bootctl)