commit 4a556890f9afb3b4af5d87bc0d91d73a69f97e96
author Ramji Jiyani <ramjiyani@google.com> Thu Feb 10 00:35:54 2022 +0000
committer Ramji Jiyani <ramjiyani@google.com> Fri Feb 11 04:19:33 2022 +0000
tree eddff76f816b803d0251bcc9b021b2635cebe761
parent c30b45e2423a56fc44e4aa3931a28e98679a4c29

system_dlkm: sepolicy: add system_dlkm_file_type

Add new attribute system_dlkm_file_type for
/system_dlkm partition files.

Bug: 218392646
Bug: 200082547
Test: TH
Signed-off-by: Ramji Jiyani <ramjiyani@google.com>
Change-Id: I193c3f1270f7a1b1259bc241def3fe51d77396f3

private/compat/32.0/32.0.ignore.cil

diff --git a/private/compat/32.0/32.0.ignore.cil b/private/compat/32.0/32.0.ignore.cil
index f1307ad..8964074 100644
--- a/private/compat/32.0/32.0.ignore.cil
+++ b/private/compat/32.0/32.0.ignore.cil
@@ -55,6 +55,7 @@
     snapuserd_proxy_socket
     supplemental_process_service
     sysfs_fs_fuse_bpf
+    system_dlkm_file
     tare_service
     tv_iapp_service
     untrusted_app_30

private/file_contexts

diff --git a/private/file_contexts b/private/file_contexts
index ba50376..da9215f 100644
--- a/private/file_contexts
+++ b/private/file_contexts
@@ -19,7 +19,7 @@
 
 # For kernel modules
 /lib(/.*)?          u:object_r:rootfs:s0
-/system_dlkm(/.*)?  u:object_r:rootfs:s0
+/system_dlkm(/.*)?  u:object_r:system_dlkm_file:s0
 
 # Empty directories
 /lost\+found        u:object_r:rootfs:s0