Add Pixel Display permission for hbmsvmanager_app
avc: denied { find } for pid=32306 uid=10239 name=com.google.hardware.pixel.display.IDisplay/default scontext=u:r:hbmsvmanager_app:s0:c239,c256,c512,c768 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=0
Bug: 154066722
Test: build, check avc denied
Change-Id: Ib9d9161a9f9589e33e59d246ad4c1a1577f93a8c
diff --git a/vendor/google/hbmsvmanager_app.te b/vendor/google/hbmsvmanager_app.te
index 25c06c0..a14930a 100644
--- a/vendor/google/hbmsvmanager_app.te
+++ b/vendor/google/hbmsvmanager_app.te
@@ -1,7 +1,9 @@
-type hbmsvmanager_app, domain;
+type hbmsvmanager_app, domain, coredomain;
app_domain(hbmsvmanager_app);
hal_client_domain(hbmsvmanager_app, hal_light)
# Standard system services
allow hbmsvmanager_app app_api_service:service_manager find;
+
+allow hbmsvmanager_app hal_pixel_display_service:service_manager find;
diff --git a/vendor/google/service.te b/vendor/google/service.te
new file mode 100644
index 0000000..9c935e9
--- /dev/null
+++ b/vendor/google/service.te
@@ -0,0 +1 @@
+type hal_pixel_display_service, service_manager_type, vendor_service;
diff --git a/vendor/google/service_contexts b/vendor/google/service_contexts
new file mode 100644
index 0000000..d7a1e46
--- /dev/null
+++ b/vendor/google/service_contexts
@@ -0,0 +1 @@
+com.google.hardware.pixel.display.IDisplay/default u:object_r:hal_pixel_display_service:s0
