Add sepolicy to cf auto device
Bug: 131230835
Test: build and launch device locally
Change-Id: I46577b885aa6aabb2b5b31b1b92ee8a3fc3f83f5
diff --git a/shared/auto/device.mk b/shared/auto/device.mk
index 200f92e..2cc4389 100644
--- a/shared/auto/device.mk
+++ b/shared/auto/device.mk
@@ -86,11 +86,6 @@
PRODUCT_PROPERTY_OVERRIDES += \
drm.service.enabled=true
-# Add car related sepolicy
-# TODO: Now use sepolicies from car emulator for test. Create a separate one for GCE
-BOARD_SEPOLICY_DIRS += \
- device/generic/car/common/sepolicy \
-
BOARD_IS_AUTOMOTIVE := true
$(call inherit-product, $(SRC_TARGET_DIR)/product/aosp_base.mk)
diff --git a/shared/sepolicy/vendor/bug_map b/shared/sepolicy/vendor/bug_map
index 722a5f6..7be5019 100644
--- a/shared/sepolicy/vendor/bug_map
+++ b/shared/sepolicy/vendor/bug_map
@@ -4,6 +4,7 @@
kernel kernel system 130424539
lmkd device file 128336318
netd device file 128336318
+rild cuttlefish_config_server_port_prop file 131250790
storaged device file 128336318
system_server system_server process 65201432
vendor_init kernel system 130424539
diff --git a/shared/sepolicy/vendor/hal_vehicle_default.te b/shared/sepolicy/vendor/hal_vehicle_default.te
new file mode 100644
index 0000000..d49d1d4
--- /dev/null
+++ b/shared/sepolicy/vendor/hal_vehicle_default.te
@@ -0,0 +1,4 @@
+# The sepolicy defines rules for default Vehicle HAL on Automotive devices
+typeattribute hal_vehicle_default hal_automotive_socket_exemption;
+
+net_domain(hal_vehicle_default)
