Label the VHAL client properly

Test: build and run it on coqos/agl
Change-Id: I6aa46ede86a07d819f4612c77a2eac49c58468c1
diff --git a/aosp_trout_arm64.mk b/aosp_trout_arm64.mk
index 6edff05..026c01d 100644
--- a/aosp_trout_arm64.mk
+++ b/aosp_trout_arm64.mk
@@ -31,3 +31,4 @@
 PRODUCT_NAME := aosp_trout_arm64
 PRODUCT_DEVICE := vsoc_arm64
 PRODUCT_MODEL := arm64 trout
+BOARD_SEPOLICY_DIRS += device/google/trout/sepolicy/vendor/google
diff --git a/sepolicy/vendor/google/file_contexts b/sepolicy/vendor/google/file_contexts
new file mode 100644
index 0000000..b0ef969
--- /dev/null
+++ b/sepolicy/vendor/google/file_contexts
@@ -0,0 +1,2 @@
+# Virtualized Vehicle HAL
+/(vendor|system/vendor)/bin/hw/android\.hardware\.automotive\.vehicle@2\.0-virtualization-service  u:object_r:hal_vehicle_default_exec:s0