commit 0f6c047d2ef57e8860118219efe03e04ca6f54ed
author Alex Klyubin <klyubin@google.com> Tue Mar 28 21:59:24 2017 -0700
committer Alex Klyubin <klyubin@google.com> Wed Mar 29 13:13:27 2017 -0700
tree 437ccee77bcd2cf379a1c64e90027ed4fe979627
parent 4a478c47f464f0f49f8802b3f49d03744450ac15

tee domain is a vendor domain

As a result, Keymaster and DRM HALs are permitted to talk to tee domain
over sockets. Unfortunately, the tee domain needs to remain on the
exemptions list because drmserver, mediaserver, and surfaceflinger are
currently permitted to talk to this domain over sockets.

We need to figure out why global policy even defines a TEE domain...

Test: mmm system/sepolicy
Bug: 36601092
Bug: 36601602
Bug: 36714625
Bug: 36715266
Change-Id: I0b95e23361204bd046ae5ad22f9f953c810c1895