commit ac097ac4c7718f8593f2b6b96a93a776984ec7c4
author Martijn Coenen <maco@google.com> Fri Aug 17 09:35:42 2018 +0200
committer Martijn Coenen <maco@google.com> Thu Oct 04 07:06:45 2018 +0000
tree 01e707bc3af4c5792d81372a35e7abc12d5e41ee
parent d115b8ed246a03e364933f0b906354041962a4ec

Add policy for apexd.

apexd is a new daemon for managing APEX packages installed
on the device. It hosts a single binder service, "apexservice".

Bug: 112455435
Test: builds, binder service can be registered,
      apexes can be accessed, verified and mounted
Change-Id: I634ad100f10b2edcd9a9c0df0d33896fa5d4ed97

private/llkd.te

diff --git a/private/llkd.te b/private/llkd.te
index 3f84eb6..385f930 100644
--- a/private/llkd.te
+++ b/private/llkd.te
@@ -22,6 +22,7 @@
 userdebug_or_eng(`
   allow llkd {
     domain
+    -apexd
     -kernel
     -keystore
     -init