commit e714ba95ed39faf3136cd99ac10de7715e6f362f
author Devin Moore <devinmoore@google.com> Mon Nov 07 20:41:10 2022 +0000
committer Devin Moore <devinmoore@google.com> Mon Nov 14 17:26:24 2022 +0000
tree 970587e50410cbdfc736d058414331ec9105b90f
parent f4ab6c9f3c21617b5f313804d1df4a32192c573d

Add sepolicy for new AIDL sensorservice

Test: boot cuttlefish and check for avc denials
Bug: 205764765
Change-Id: Ie9d02b43250ca3c5f642b2d87d2a5b532a9b5195

private/compat/33.0/33.0.ignore.cil

diff --git a/private/compat/33.0/33.0.ignore.cil b/private/compat/33.0/33.0.ignore.cil
index 1bb5557..ee56e52 100644
--- a/private/compat/33.0/33.0.ignore.cil
+++ b/private/compat/33.0/33.0.ignore.cil
@@ -11,6 +11,7 @@
     device_config_memory_safety_native_prop
     device_config_vendor_system_native_prop
     devicelock_service
+    fwk_sensor_service
     hal_bootctl_service
     hal_cas_service
     hal_cpu_hwservice

private/service_contexts

diff --git a/private/service_contexts b/private/service_contexts
index 2e2e7b2..496fcd4 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -1,4 +1,5 @@
 android.frameworks.stats.IStats/default                              u:object_r:fwk_stats_service:s0
+android.frameworks.sensorservice.ISensorManager/default              u:object_r:fwk_sensor_service:s0
 android.hardware.audio.core.IConfig/default                          u:object_r:hal_audio_service:s0
 android.hardware.audio.core.IModule/default                          u:object_r:hal_audio_service:s0
 android.hardware.audio.effect.IFactory/default                       u:object_r:hal_audio_service:s0