From a754ddf83838f0cecf3e85c2a9231fbd321daa63 Mon Sep 17 00:00:00 2001
From: Akshay Joshi <joshiakshay@google.com>
Date: Mon, 11 Jun 2018 15:51:53 -0700
Subject: Add MTC specific SELinux permissions for VrCore

Bug: 78638290
Test: boot
Change-Id: I560d3907088336aff8bd43747f1a299b67a63e9f
---
 vrcore/sepolicy_mtc/vrcore_app.te | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 vrcore/sepolicy_mtc/vrcore_app.te

diff --git a/vrcore/sepolicy_mtc/vrcore_app.te b/vrcore/sepolicy_mtc/vrcore_app.te
new file mode 100644
index 0000000..a037610
--- /dev/null
+++ b/vrcore/sepolicy_mtc/vrcore_app.te
@@ -0,0 +1,13 @@
+###
+### MTC specific VrCore permissions
+###
+
+allow vrcore_app persist_file:dir search;
+
+# allow vrcore to access dsp
+allow vrcore_app qdsp_device:chr_file r_file_perms;
+r_dir_file(vrcore_app, adsprpcd_file)
+
+# allow vrcore to access sensor service
+allow vrcore_app fwk_sensor_hwservice:hwservice_manager find;
+allow vrcore_app sensorservice_service:service_manager find;
-- 
cgit v1.2.3