tree 1b7a814d83d773b4f096c3482af42c78e9efe7d5
parent 1f257314c11e84e47b313c2f73670ad3f0798f7c
author dcashman <dcashman@google.com> 1464716712 -0700
committer dcashman <dcashman@google.com> 1464722512 -0700

Copy AoV adspd perms to priv_app.

N introduced a new domain, priv_app to reduce the scope of permissions
granted to the untrusted_app domain.  This includes the google voice
enrollment app on shamu, which required device-specific permissions
added to untrusted_app. Copy these to priv_app to continue granting
that access.

Addresses the following denial:
82960: 05-25 12:17:41.143  3080  3080 W unknown : type=1400 audit(0.0:5): avc: denied { write } for comm=4453502066772055706461746572 name="adspdsock" dev="tmpfs" ino=9573 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:adspd_socket:s0 tclass=sock_file permissive=0
82964: 05-25 12:17:41.252  3046  3081 W TEnroll.Q.u: .load: not starting load, not debug mode
82966: 05-25 12:17:41.430  3046  3085 W TEnroll.NoiseMeter: connect failed: status=-1 82967: 05-25 12:17:41.427  3085  3085 W roll.NoiseMeter: type=1400 audit(0.0:6): avc: denied { write } for name="adspdsock" dev="tmpfs" ino=9573 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:adspd_socket:s0 tclass=sock_file permissive=0

(cherry-pick of commit: f93e71e65d4258be9a1a2d25cf5bfbf85859551a)

Bug: 27705050
Change-Id: I860f321777f688b408515bf727b84fc003f49211