Add sepolicy for UV exposure reporter.
Bug: 155789624
Test: Verified no SELinux denials for UvExposureReporter.
Change-Id: I3f791dd31b602e23327196112e85632b0443876c
diff --git a/vendor/google/seapp_contexts b/vendor/google/seapp_contexts
index de06c8d..e38b809 100644
--- a/vendor/google/seapp_contexts
+++ b/vendor/google/seapp_contexts
@@ -25,3 +25,6 @@
# Domain for Display
user=_app seinfo=platform name=com.android.hbmsvmanager domain=hbmsvmanager_app type=app_data_file levelFrom=all
+
+# Domain for UvExposureReporter service
+user=_app seinfo=platform name=com.google.android.uvexposurereporter domain=uv_exposure_reporter type=app_data_file levelFrom=all
diff --git a/vendor/google/uv_exposure_reporter.te b/vendor/google/uv_exposure_reporter.te
new file mode 100644
index 0000000..1d9ae56
--- /dev/null
+++ b/vendor/google/uv_exposure_reporter.te
@@ -0,0 +1,13 @@
+type uv_exposure_reporter, domain;
+
+userdebug_or_eng(`
+ app_domain(uv_exposure_reporter)
+
+ allow uv_exposure_reporter app_api_service:service_manager find;
+ allow uv_exposure_reporter fwk_stats_hwservice:hwservice_manager find;
+ allow uv_exposure_reporter sysfs_msm_subsys:dir search;
+ allow uv_exposure_reporter sysfs_msm_subsys:file r_file_perms;
+ binder_call(uv_exposure_reporter, gpuservice);
+ binder_call(uv_exposure_reporter, stats_service_server);
+')
+
