From 812b6fe9282795cd3aecc36041cd23889d71694d Mon Sep 17 00:00:00 2001
From: Huaiming Li <huaiming.li@mediatek.com>
Date: Sat, 18 Jan 2020 10:21:51 +0800
Subject: [PATCH] [ALPS04864227] add selinux rules for fixing system API dump
 issue

1. allow domain process can use fd
2. allow domain process can write data to file in /data/vendor/aee_exp/

MTK-Commit-Id: 7b021c62aa51a474e12c59a805f97b27b940e357

Change-Id: I286e248c8fd3fe05492753a91806c19ffce0079d
CR-Id: ALPS04864227
Feature: Android Exception Engine(AEE)
---
 non_plat/domain.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/non_plat/domain.te b/non_plat/domain.te
index f1877f7..13111b9 100644
--- a/non_plat/domain.te
+++ b/non_plat/domain.te
@@ -27,4 +27,6 @@ allow {
 #  -untrusted_app_all
 #} aee_aed:unix_stream_socket connectto;
 allow { domain -coredomain -hal_configstore_server -vendor_init } aee_aedv:unix_stream_socket connectto;
+allow { domain -coredomain -hal_configstore_server -vendor_init } aee_exp_vendor_file:file w_file_perms;
+allow { domain -coredomain -hal_configstore_server -vendor_init } aee_aedv:fd use;