commit 9f74a428c4ad085ac8ea26509240dfeccb658b85
author Igor Murashkin <iam@google.com> Thu Sep 19 11:04:20 2019 -0700
committer Igor Murashkin <iam@google.com> Tue Oct 22 12:45:46 2019 -0700
tree 09573d4a46cd388f64ec498758d4495260a25344
parent 94b0e84094c103b94bdf9573e609e01f638f7ab6

sepolicy: Add iorap_prefetcherd rules

/system/bin/iorapd fork+execs into /system/bin/iorap_prefetcherd during
startup

See also go/android-iorap-security for the design doc

Bug: 137403231
Change-Id: Ie8949c7927a98e0ab757bc46230c589b5a496360

private/iorapd.te

diff --git a/private/iorapd.te b/private/iorapd.te
index 91f4ddc..ba8ece3 100644
--- a/private/iorapd.te
+++ b/private/iorapd.te
@@ -2,3 +2,5 @@
 
 init_daemon_domain(iorapd)
 tmpfs_domain(iorapd)
+
+domain_auto_trans(iorapd, iorap_prefetcherd_exec, iorap_prefetcherd)