Merge "sepolicy: Add "rs" and "rs_exec" to public policy" am: 9c9eb2dfca am: 67fbfdf793
am: 8f1e4e52f3
Change-Id: I72500b06122cb5b5f527d196deff9bc50a5442cb
diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil
index 979a506..fd05ea4 100644
--- a/private/compat/28.0/28.0.ignore.cil
+++ b/private/compat/28.0/28.0.ignore.cil
@@ -69,6 +69,8 @@
permissionmgr_service
recovery_socket
role_service
+ rs
+ rs_exec
rss_hwm_reset
rss_hwm_reset_exec
runtime_service
diff --git a/private/rs.te b/private/rs.te
index 9229ed9..56f8dfc 100644
--- a/private/rs.te
+++ b/private/rs.te
@@ -1,6 +1,3 @@
-type rs, domain, coredomain;
-type rs_exec, system_file_type, exec_type, file_type;
-
# Any files which would have been created as app_data_file
# will be created as rs_data_file instead.
allow rs app_data_file:dir ra_dir_perms;
diff --git a/public/rs.te b/public/rs.te
new file mode 100644
index 0000000..16b6e96
--- /dev/null
+++ b/public/rs.te
@@ -0,0 +1,2 @@
+type rs, domain, coredomain;
+type rs_exec, system_file_type, exec_type, file_type;