Merge "Add sepolicy for device drop monitor."
diff --git a/vendor/google/device_drop_monitor.te b/vendor/google/device_drop_monitor.te
new file mode 100644
index 0000000..0721f33
--- /dev/null
+++ b/vendor/google/device_drop_monitor.te
@@ -0,0 +1,13 @@
+type device_drop_monitor, domain;
+
+userdebug_or_eng(`
+ app_domain(device_drop_monitor)
+
+ allow device_drop_monitor app_api_service:service_manager find;
+ allow device_drop_monitor fwk_stats_hwservice:hwservice_manager find;
+ allow device_drop_monitor sysfs_msm_subsys:dir search;
+ allow device_drop_monitor sysfs_msm_subsys:file r_file_perms;
+ binder_call(device_drop_monitor, gpuservice);
+ binder_call(device_drop_monitor, statsd);
+')
+
diff --git a/vendor/google/seapp_contexts b/vendor/google/seapp_contexts
index e07a087..0799fc4 100644
--- a/vendor/google/seapp_contexts
+++ b/vendor/google/seapp_contexts
@@ -25,3 +25,6 @@
# Domain for Touch app
user=_app seinfo=platform name=com.google.touch.touchinspector domain=google_touch_app type=app_data_file levelFrom=user
+
+# Domain for DeviceDropMonitor service
+user=_app seinfo=platform name=com.google.android.devicedropmonitor domain=device_drop_monitor type=app_data_file levelFrom=all
