Fix OBDM selinux denials am: 802a13be7f
Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-sepolicy/+/12249075
Change-Id: Ib6864bfec0df8ee8b97f0d91d5a9b59b3c7a3569
diff --git a/vendor/google/hbmsvmanager_app.te b/vendor/google/hbmsvmanager_app.te
index 25c06c0..a14930a 100644
--- a/vendor/google/hbmsvmanager_app.te
+++ b/vendor/google/hbmsvmanager_app.te
@@ -1,7 +1,9 @@
-type hbmsvmanager_app, domain;
+type hbmsvmanager_app, domain, coredomain;
app_domain(hbmsvmanager_app);
hal_client_domain(hbmsvmanager_app, hal_light)
# Standard system services
allow hbmsvmanager_app app_api_service:service_manager find;
+
+allow hbmsvmanager_app hal_pixel_display_service:service_manager find;
diff --git a/vendor/google/service.te b/vendor/google/service.te
new file mode 100644
index 0000000..9c935e9
--- /dev/null
+++ b/vendor/google/service.te
@@ -0,0 +1 @@
+type hal_pixel_display_service, service_manager_type, vendor_service;
diff --git a/vendor/google/service_contexts b/vendor/google/service_contexts
new file mode 100644
index 0000000..d7a1e46
--- /dev/null
+++ b/vendor/google/service_contexts
@@ -0,0 +1 @@
+com.google.hardware.pixel.display.IDisplay/default u:object_r:hal_pixel_display_service:s0
