Merge "Add sepolicy for LightHal 1.1 and hbmsvmanager" into rvc-dev am: 3888368972
Change-Id: Ia965a3df934439f42de73e8913479c5364e1ab67
diff --git a/vendor/google/file_contexts b/vendor/google/file_contexts
index c1ba79d..91705b2 100644
--- a/vendor/google/file_contexts
+++ b/vendor/google/file_contexts
@@ -31,7 +31,7 @@
/vendor/bin/hw/init_citadel u:object_r:init_citadel_exec:s0
/vendor/bin/hw/citadel_updater u:object_r:citadel_updater_exec:s0
/vendor/bin/CitadelProvision u:object_r:citadel_provision_exec:s0
-/vendor/bin/hw/hardware\.google\.light@1\.0-service u:object_r:hal_light_default_exec:s0
+/vendor/bin/hw/hardware\.google\.light@1\.1-service u:object_r:hal_light_default_exec:s0
/vendor/bin/hw/vendor\.google\.radioext@1\.0-service u:object_r:hal_radioext_default_exec:s0
/vendor/bin/hw/wait_for_strongbox u:object_r:wait_for_strongbox_exec:s0
/vendor/bin/color_init u:object_r:color_init_exec:s0
diff --git a/vendor/google/hbmsvmanager_app.te b/vendor/google/hbmsvmanager_app.te
new file mode 100644
index 0000000..25c06c0
--- /dev/null
+++ b/vendor/google/hbmsvmanager_app.te
@@ -0,0 +1,7 @@
+type hbmsvmanager_app, domain;
+
+app_domain(hbmsvmanager_app);
+hal_client_domain(hbmsvmanager_app, hal_light)
+
+# Standard system services
+allow hbmsvmanager_app app_api_service:service_manager find;
diff --git a/vendor/google/seapp_contexts b/vendor/google/seapp_contexts
index 4cb5968..de06c8d 100644
--- a/vendor/google/seapp_contexts
+++ b/vendor/google/seapp_contexts
@@ -21,4 +21,7 @@
user=_app seinfo=google name=com.google.android.GoogleCamera domain=google_camera_app type=app_data_file levelFrom=all
# Also allow GoogleCameraNext, the dogfood beta version, the same access as GoogleCamera
-user=_app seinfo=googlepulse name=com.google.android.apps.googlecamera.fishfood domain=google_camera_app type=app_data_file levelFrom=all
\ No newline at end of file
+user=_app seinfo=googlepulse name=com.google.android.apps.googlecamera.fishfood domain=google_camera_app type=app_data_file levelFrom=all
+
+# Domain for Display
+user=_app seinfo=platform name=com.android.hbmsvmanager domain=hbmsvmanager_app type=app_data_file levelFrom=all
