commit a349a5eade12c246239c60bf554e8821aa4bba7e
author Tri Vo <trong@google.com> Mon Jul 12 15:53:15 2021 -0700
committer Tri Vo <trong@google.com> Mon Jul 12 16:05:56 2021 -0700
tree a59fbdde85cda1efcbbbed30f8acb5ea7ba466da
parent 314e117b0add6df43baac460fb52da619b75376a

Fix securedpud sepolicy denials

Address following denials:
avc: denied { read } for comm="securedpud" name="system" dev="tmpfs"
ino=321 scontext=u:r:securedpud:s0
tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file
permissive=1

avc: denied { open } for comm="securedpud" path="/dev/dma_heap/system"
dev="tmpfs" ino=321 scontext=u:r:securedpud:s0
tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file
permissive=1

avc: denied { ioctl } for comm="securedpud" path="/dev/dma_heap/system"
dev="tmpfs" ino=321 ioctlcmd=0x4800 scontext=u:r:securedpud:s0
tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file
permissive=1

Bug: 176508588
Test: m selinux_policy
Change-Id: Ibb1f07c6341920c061323105ea2486b516a18915