commit 6a1ba7097bb7bc089a4fca56b23fff33e4eaea5a
author Jorge E. Moreira <jemoreira@google.com> Tue Mar 26 15:32:18 2019 -0700
committer Jorge E. Moreira <jemoreira@google.com> Tue Mar 26 15:32:18 2019 -0700
tree c7aacc3a5631469871667aacad10204970063c51
parent 40deb6686ed426dbcfe881f3b0ff77dd0024f96b

Allow hwcomposer to access vsockets

The hwcomposer used with crosvm needs to access a vsocket to get
screen config and send frames.

Bug: 129359512
Test: run locally under crosvm with selinux enforcing
Change-Id: Ib36495daaf7ed4089e53d54d9f606a327c96c7fe

shared/sepolicy/hal_graphics_composer.te

diff --git a/shared/sepolicy/hal_graphics_composer.te b/shared/sepolicy/hal_graphics_composer.te
index 089e59d..0e6266c 100644
--- a/shared/sepolicy/hal_graphics_composer.te
+++ b/shared/sepolicy/hal_graphics_composer.te
@@ -1,2 +1,3 @@
 allow hal_graphics_composer_server hal_graphics_allocator_default_tmpfs:file read;
 allow hal_graphics_composer_server region_screen_device:chr_file rw_file_perms;
+allow hal_graphics_composer_server self:{ socket vsock_socket } create_socket_perms_no_ioctl;