From c09b4b075391665736a6f68c4389bf8de8ccbb84 Mon Sep 17 00:00:00 2001
From: Lili Lin <lili.lin@mediatek.com>
Date: Sat, 18 Jan 2020 10:07:48 +0800
Subject: [PATCH] [ALPS04160752] Add policy for installd

To address following denial with kernel-4.14

avc: denied { map } for pid=651 comm="Binder:651_1" path="/vendor/etc/selinux/vendor_file_contexts" dev="dm-1" ino=44 scontext=u:r:installd:s0 tcontext=u:object_r:vendor_configs_file:s0 tclass=file permissive=1

MTK-Commit-Id: 8af14b2b4ff87f37add600ed19a76b1a8cf9dd32

Change-Id: Ia40e6e70d57db6a2a875c3f7d7c69c0c298a36cb
CR-Id: ALPS04160752
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
---
 non_plat/installd.te | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 non_plat/installd.te

diff --git a/non_plat/installd.te b/non_plat/installd.te
new file mode 100644
index 0000000..88c6b54
--- /dev/null
+++ b/non_plat/installd.te
@@ -0,0 +1,7 @@
+# ==================================
+# MTK Policy Rule
+# ==================================
+
+# Kernel-4.14 migration, fix boot fail.
+allow installd vendor_configs_file:file map;
+