commit 439563f9437b364222ac03d15cf7948c1e96bdc2
author Nikita Ioffe <ioffe@google.com> Tue Dec 10 18:33:22 2024 +0000
committer Nikita Ioffe <ioffe@google.com> Thu Jan 09 02:02:05 2025 +0000
tree f302fc4c6d32a19fb5723f799ea5b948cec99c58
parent 15a8dbb7fcc5699aba3f69c6e292dc4995af8003

Add basic sepolicy for the IVmCapabilities HAL

Bug: 360102915
Test: builds
Test: presubmit
Change-Id: I1b7f73a9e3ff1ad35c318ac56667c64775de4064

private/service.te

diff --git a/private/service.te b/private/service.te
index ce648c2..7a2153b 100644
--- a/private/service.te
+++ b/private/service.te
@@ -69,6 +69,10 @@
     type ranging_service, app_api_service, system_server_service, service_manager_type;
 ')
 
+until_board_api(202504, `
+    type hal_vm_capabilities_service, protected_service, hal_service_type, service_manager_type;
+')
+
 ###
 ### Neverallow rules
 ###