Add sepolicy for device drop monitor.
- porting from sepolicy of the same app on coral (ag/10430527).
Bug: 142380195
Test: build success
Change-Id: Idbcaddb12a4818c1ab1dc909d5fe4c23ae2ea2d6
diff --git a/vendor/google/device_drop_monitor.te b/vendor/google/device_drop_monitor.te
new file mode 100644
index 0000000..3f680f4
--- /dev/null
+++ b/vendor/google/device_drop_monitor.te
@@ -0,0 +1,13 @@
+type device_drop_monitor, domain;
+
+userdebug_or_eng(`
+ app_domain(device_drop_monitor)
+
+ allow device_drop_monitor app_api_service:service_manager find;
+ allow device_drop_monitor fwk_stats_hwservice:hwservice_manager find;
+ allow device_drop_monitor sysfs_msm_subsys:dir search;
+ allow device_drop_monitor sysfs_msm_subsys:file r_file_perms;
+ binder_call(device_drop_monitor, gpuservice);
+ binder_call(device_drop_monitor, stats_service_server);
+')
+
diff --git a/vendor/google/seapp_contexts b/vendor/google/seapp_contexts
index e38b809..c6c8850 100644
--- a/vendor/google/seapp_contexts
+++ b/vendor/google/seapp_contexts
@@ -28,3 +28,6 @@
# Domain for UvExposureReporter service
user=_app seinfo=platform name=com.google.android.uvexposurereporter domain=uv_exposure_reporter type=app_data_file levelFrom=all
+
+# Domain for DeviceDropMonitor service
+user=_app seinfo=platform name=com.google.android.devicedropmonitor domain=device_drop_monitor type=app_data_file levelFrom=all
