commit 5c76e0c1f3166a61c6cdd6ff5480a1c361d6a562
author Kris Chen <chenkris@google.com> Mon Mar 08 16:35:50 2021 +0800
committer Kris Chen <chenkris@google.com> Mon Mar 08 16:42:27 2021 +0800
tree dfd2bbb24dba75aea3ca1a8d0fde605eb8ffdfed
parent 5009efa7762477694a7d223e9a84dc95be2651a6

trusty_apploader: Fix avc errors

Fix the following avc denials:
trusty_apploade: type=1400 audit(0.0:3): avc: denied { read } for name="system" dev="tmpfs" ino=713 scontext=u:r:trusty_apploader:s0 tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file permissive=1
trusty_apploade: type=1400 audit(0.0:4): avc: denied { open } for path="/dev/dma_heap/system" dev="tmpfs" ino=713 scontext=u:r:trusty_apploader:s0 tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file permissive=1
trusty_apploade: type=1400 audit(0.0:5): avc: denied { ioctl } for path="/dev/dma_heap/system" dev="tmpfs" ino=713 ioctlcmd=0x4800 scontext=u:r:trusty_apploader:s0 tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file permissive=1

Bug: 180874342
Test: Verify no avc denied when trusty app is loaded.
Change-Id: Idbd850580220a1cb85a221d769d741f63cd8751f