Fix sepolicy for graphics and gnss
This change fixes these errors:
avc: denied { map } for path="/dev/vndbinder" dev="tmpfs" ino=6410 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
avc: denied { map } for path="/dev/vndbinder" dev="tmpfs" ino=6410 scontext=u:r:hal_gnss_default:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
Bug: 111742629
Test: make -j80, ran emulator
Signed-off-by: Roman Kiryanov <rkir@google.com>
Change-Id: I4f2742627c68e166482cdc97a00603ac87c888c6
diff --git a/sepolicy/common/hal_gnss_default.te b/sepolicy/common/hal_gnss_default.te
index 0dd3d03..715cc56 100644
--- a/sepolicy/common/hal_gnss_default.te
+++ b/sepolicy/common/hal_gnss_default.te
@@ -1,3 +1,3 @@
#============= hal_gnss_default ==============
-allow hal_gnss_default vndbinder_device:chr_file { ioctl open read write };
+allow hal_gnss_default vndbinder_device:chr_file { ioctl open read write map };
diff --git a/sepolicy/common/hal_graphics_composer_default.te b/sepolicy/common/hal_graphics_composer_default.te
index 034bdef..e9205cd 100644
--- a/sepolicy/common/hal_graphics_composer_default.te
+++ b/sepolicy/common/hal_graphics_composer_default.te
@@ -1,3 +1,3 @@
#============= hal_graphics_composer_default ==============
-allow hal_graphics_composer_default vndbinder_device:chr_file { ioctl open read write };
+allow hal_graphics_composer_default vndbinder_device:chr_file { ioctl open read write map };
