commit 32f279c096c477ba01692d7fc3a2416db3692822
author Tri Vo <trong@google.com> Wed Aug 21 15:43:25 2019 -0700
committer Daniel Solomon <solomondaniel@google.com> Wed Aug 21 16:59:55 2019 -0700
tree 2f2ca7d969b0c235fc1dbc49e1a00aba210870b2
parent 74395f1ff47a3bab17dc6b806bc19dd3aacc4815

selinux: tag gpu_service as app_api_service

gpu_service is already accessible to untrusted 3p apps aosp/898376.
Otherwise, vendor apps can't access gpu_service.

Bug: 139685237
Test: m selinux_policy
Change-Id: I30a951cd712b0ae4aacd2c4d6d42e74fac5c0707

public/service.te

diff --git a/public/service.te b/public/service.te
index 92f8a09..a2193d0 100644
--- a/public/service.te
+++ b/public/service.te
@@ -10,7 +10,7 @@
 type fingerprintd_service,      service_manager_type;
 type hal_fingerprint_service,   service_manager_type;
 type gatekeeper_service,        app_api_service, service_manager_type;
-type gpu_service,               service_manager_type;
+type gpu_service,               app_api_service, service_manager_type;
 type idmap_service,             service_manager_type;
 type iorapd_service,            service_manager_type;
 type incident_service,          service_manager_type;