commit 9f74a428c4ad085ac8ea26509240dfeccb658b85
author Igor Murashkin <iam@google.com> Thu Sep 19 11:04:20 2019 -0700
committer Igor Murashkin <iam@google.com> Tue Oct 22 12:45:46 2019 -0700
tree 09573d4a46cd388f64ec498758d4495260a25344
parent 94b0e84094c103b94bdf9573e609e01f638f7ab6

sepolicy: Add iorap_prefetcherd rules

/system/bin/iorapd fork+execs into /system/bin/iorap_prefetcherd during
startup

See also go/android-iorap-security for the design doc

Bug: 137403231
Change-Id: Ie8949c7927a98e0ab757bc46230c589b5a496360

private/iorap_prefecherd.te

diff --git a/private/iorap_prefecherd.te b/private/iorap_prefecherd.te
new file mode 100644
index 0000000..9ddb512
--- /dev/null
+++ b/private/iorap_prefecherd.te
@@ -0,0 +1,4 @@
+typeattribute iorap_prefetcherd coredomain;
+
+init_daemon_domain(iorap_prefetcherd)
+tmpfs_domain(iorap_prefetcherd)