VmTerminalApp can create and manage vsock socket.
Bug: 340126051
Test: TH
Change-Id: I83bb6ddf300181147e68d8857fad42d540849dd6
diff --git a/private/vmlauncher_app.te b/private/vmlauncher_app.te
index 71c9f3f..8597fcd 100644
--- a/private/vmlauncher_app.te
+++ b/private/vmlauncher_app.te
@@ -20,6 +20,10 @@
allow vmlauncher_app crosvm:binder { call transfer };
')
+is_flag_enabled(RELEASE_AVF_ENABLE_NETWORK, `
+ allow vmlauncher_app self:vsock_socket { create_socket_perms_no_ioctl listen accept };
+')
+
userdebug_or_eng(`
# Create pty/pts and connect it to the guest terminal.
create_pty(vmlauncher_app)