Sepolicy: Move some parts from public to private
Those should not have been public before, but were forced to by
old neverallow rules.
Test: m
Change-Id: If8430b9c8d42b7cbcd28bbfbc79d579c69067edd
diff --git a/private/preopt2cachename.te b/private/preopt2cachename.te
index d10f767..7c85a9f 100644
--- a/private/preopt2cachename.te
+++ b/private/preopt2cachename.te
@@ -1 +1,18 @@
+# preopt2cachename executable
+#
+# This executable translates names from the preopted versions the build system
+# creates to the names the runtime expects in the data directory.
+type preopt2cachename, domain;
+type preopt2cachename_exec, system_file_type, exec_type, file_type;
+
typeattribute preopt2cachename coredomain;
+
+# Allow write to stdout.
+allow preopt2cachename cppreopts:fd use;
+allow preopt2cachename cppreopts:fifo_file { getattr read write };
+
+# Allow write to logcat.
+allow preopt2cachename proc_net_type:file r_file_perms;
+userdebug_or_eng(`
+ auditallow preopt2cachename proc_net_type:{ dir file lnk_file } { getattr open read };
+')