Allow access to cgroups.json files
libprocessgroup now reads cgroup descriptor files instead of cgroup.rc
which was removed. Both system and vendor domains have users of
libprocessgroup APIs which require access to these files.
Bug: 349105928
Bug: 372273614
Change-Id: I25898ecac543e12bb349fc25070a70333d649872
diff --git a/private/crosvm.te b/private/crosvm.te
index ccfffa0..5613e6f 100644
--- a/private/crosvm.te
+++ b/private/crosvm.te
@@ -184,6 +184,7 @@
-vendor_vm_data_file
# These types are not required for crosvm, but the access is granted to globally in domain.te
# thus should be exempted here.
+ -vendor_cgroup_desc_file
-vendor_configs_file
-vendor_microdroid_file
-vndk_sp_file