update aconfigd selinux policy
For aconfigd test, for atest to work, the shell domain needs to be able
to connect to aconfigd_socket. In addition, aconfigd needs to be able to
access the test storage files as shell_data_file. All these policies are
only needed for userdebug_or_eng build.
Bug: 312459182
Test: m, launch avd, atest, then audit2allow, no avc denials found
Change-Id: Ifb369f7e0000dfe35305fe976e330fa516ff440c
diff --git a/private/shell.te b/private/shell.te
index 2b7bd88..1d59a5d 100644
--- a/private/shell.te
+++ b/private/shell.te
@@ -267,3 +267,9 @@
# Allow shell to execute oatdump.
allow shell oatdump_exec:file rx_file_perms;
+
+# Allow shell access to socket for test
+userdebug_or_eng(`
+ allow shell aconfigd_socket:sock_file write;
+ allow shell aconfigd:unix_stream_socket connectto;
+')