Merge "sepolicy: Add "rs" and "rs_exec" to public policy" am: 9c9eb2dfca
am: 67fbfdf793
Change-Id: If850f0f15a3a5d0c1d226c99dd02b78a68644097
diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil
index 93e1eb3..81720e5 100644
--- a/private/compat/28.0/28.0.ignore.cil
+++ b/private/compat/28.0/28.0.ignore.cil
@@ -68,6 +68,8 @@
permissionmgr_service
recovery_socket
role_service
+ rs
+ rs_exec
rss_hwm_reset
rss_hwm_reset_exec
runtime_service
diff --git a/private/rs.te b/private/rs.te
index 9229ed9..56f8dfc 100644
--- a/private/rs.te
+++ b/private/rs.te
@@ -1,6 +1,3 @@
-type rs, domain, coredomain;
-type rs_exec, system_file_type, exec_type, file_type;
-
# Any files which would have been created as app_data_file
# will be created as rs_data_file instead.
allow rs app_data_file:dir ra_dir_perms;
diff --git a/public/rs.te b/public/rs.te
new file mode 100644
index 0000000..16b6e96
--- /dev/null
+++ b/public/rs.te
@@ -0,0 +1,2 @@
+type rs, domain, coredomain;
+type rs_exec, system_file_type, exec_type, file_type;