Copy AoV adspd perms to priv_app.
N introduced a new domain, priv_app to reduce the scope of permissions
granted to the untrusted_app domain. This includes the google voice
enrollment app on shamu, which required device-specific permissions
added to untrusted_app. Copy these to priv_app to continue granting
that access.
Addresses the following denial:
82960: 05-25 12:17:41.143 3080 3080 W unknown : type=1400 audit(0.0:5): avc: denied { write } for comm=4453502066772055706461746572 name="adspdsock" dev="tmpfs" ino=9573 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:adspd_socket:s0 tclass=sock_file permissive=0
82964: 05-25 12:17:41.252 3046 3081 W TEnroll.Q.u: .load: not starting load, not debug mode
82966: 05-25 12:17:41.430 3046 3085 W TEnroll.NoiseMeter: connect failed: status=-1 82967: 05-25 12:17:41.427 3085 3085 W roll.NoiseMeter: type=1400 audit(0.0:6): avc: denied { write } for name="adspdsock" dev="tmpfs" ino=9573 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:adspd_socket:s0 tclass=sock_file permissive=0
(cherry-pick of commit: f93e71e65d4258be9a1a2d25cf5bfbf85859551a)
Bug: 27705050
Change-Id: I860f321777f688b408515bf727b84fc003f49211
1 file changed
