DO NOT MERGE Fake 29.0 sepolicy prebuilts
I took current AOSP policy as base, then removed sepolicy so that the
set of type and attributes was a subset of types and attributes in Q
sepolicy, with exception of those that have not yet been cleand up in
current AOSP:
mediaswcodec_server
netd_socket
mediaextractor_update_service
thermalserviced
thermalserviced_exec
Bug: 133196056
Test: n/a
Change-Id: I2cbe749777684146114c89e1e6fc3f07400c0ae5
diff --git a/prebuilts/api/29.0/private/perfprofd.te b/prebuilts/api/29.0/private/perfprofd.te
new file mode 100644
index 0000000..c65c6f1
--- /dev/null
+++ b/prebuilts/api/29.0/private/perfprofd.te
@@ -0,0 +1,28 @@
+userdebug_or_eng(`
+ typeattribute perfprofd coredomain;
+ init_daemon_domain(perfprofd)
+')
+
+neverallow {
+ domain
+ userdebug_or_eng(`
+ -statsd
+ -system_server
+ -system_suspend_server
+ -hal_health_server
+ -hwservicemanager
+ ')
+} perfprofd:binder call;
+
+neverallow perfprofd {
+ domain
+ userdebug_or_eng(`
+ -servicemanager
+ -statsd
+ -su
+ -system_server
+ -system_suspend_server
+ -hal_health_server
+ -hwservicemanager
+ ')
+}:binder call;