Add test_pkvm_tee_service example tee service
It can be used to test that custom smcs filtering is correctly
integrated on devices with pkvm hypervisor.
Bug: 360102915
Test: vm run-microdroid --tee_services test_pkvm_tee_service
Test: builds
Change-Id: I10ccc42d754b2b16139d6c3b22754a1d3cbc76a3
diff --git a/private/shell.te b/private/shell.te
index 31bf506..70f296e 100644
--- a/private/shell.te
+++ b/private/shell.te
@@ -484,6 +484,7 @@
')
allow shell tee_service_contexts_file:file r_file_perms;
+allow shell test_pkvm_tee_service:tee_service use;
# Everything is labeled as rootfs in recovery mode. Allow shell to
# execute them.