commit 6ea56f6b6de40a56bfab5736ebda10a1b3c75d32
author RafayKamran <rafaykamran@google.com> Wed Nov 03 15:56:30 2021 +0000
committer Rafay Kamran <rafaykamran@google.com> Tue Nov 23 10:59:59 2021 +0000
tree 0dc277c0e901ce14769452f536dd190782b27abc
parent 0b373e5fdef6fc7bc2471f3efc99cb7a1cca0691

Added supplemental key to the sepolicy

Allows apps to be signed with the supplemental key

Bug: 203670791
Test: Make, device boots
Ignore-AOSP-First: Feature is developed in internal branch

Change-Id: I2215ffe74e0fa19ff936e90c08c4ebfd177e5258

private/mac_permissions.xml

diff --git a/private/mac_permissions.xml b/private/mac_permissions.xml
index 7fc37c1..0e77637 100644
--- a/private/mac_permissions.xml
+++ b/private/mac_permissions.xml
@@ -51,6 +51,11 @@
       <seinfo value="platform" />
     </signer>
 
+    <!-- Supplemental process key -->
+    <signer signature="@SUPPLEMENTAL_PROCESS" >
+      <seinfo value="supplemental_process" />
+    </signer>
+
     <!-- Media key in AOSP -->
     <signer signature="@MEDIA" >
       <seinfo value="media" />