Set sepolicy for vmnic in AVF
Bug: 340376951
Test: Presubmit
Change-Id: I5f48ff4a459805de2f74d160c1b61473c6de0466
diff --git a/private/virtualizationservice.te b/private/virtualizationservice.te
index 99c2a3b..a72f30f 100644
--- a/private/virtualizationservice.te
+++ b/private/virtualizationservice.te
@@ -24,6 +24,12 @@
binder_call(virtualizationservice, vfio_handler)
')
+is_flag_enabled(RELEASE_AVF_ENABLE_NETWORK, `
+ # Let virtualizationservice find and communicate with vmnic.
+ allow virtualizationservice vmnic_service:service_manager find;
+ binder_call(virtualizationservice, vmnic)
+')
+
# Allow the virtualizationservice domain to serve a remotely provisioned component for
# pVM remote attestation.
hal_server_domain(virtualizationservice, hal_remotelyprovisionedcomponent_avf)