Introduce vmlauncher_app domain
Bug: 333485208
Test: check display
Change-Id: I64c09f09615e89cf24398c01b8f87b0136be0a7f
diff --git a/private/crosvm.te b/private/crosvm.te
index a96a22a..fced92f 100644
--- a/private/crosvm.te
+++ b/private/crosvm.te
@@ -93,7 +93,7 @@
# To provide display service to an app to get surface.
# TODO(b/332677707): remove them when display service uses binder RPC.
- allow crosvm priv_app:binder { transfer call };
+ allow crosvm vmlauncher_app:binder { transfer call };
allow crosvm servicemanager:binder { call transfer };
allow crosvm virtualization_service:service_manager find;
allow crosvm virtualizationservice:binder { call transfer };