goldfish: add sepolicies
This is copied from build/make/target/generic/sepolicy
and build/make/target/generic_x86/sepolicy
at the following cl:
commit cfbe8cf3bb1a302c8e41caed528c2d8ea6c70d4b
Merge: 0f494a025 0047dbed1
Author: Yi Kong <yikong@google.com>
Date: Wed Jun 13 02:10:12 2018 +0000
Merge "Fix CLANG_EXTERNAL_CFLAGS logic"
BUG: 110030159
Change-Id: I121a20c2e24f020921045463d5043b634ffbe7c2
diff --git a/sepolicy/common/logpersist.te b/sepolicy/common/logpersist.te
new file mode 100644
index 0000000..3fc0250
--- /dev/null
+++ b/sepolicy/common/logpersist.te
@@ -0,0 +1,13 @@
+# goldfish logcat service: runs logcat -Q in logpersist domain
+
+# See global logcat.te/logpersist.te, only set for eng & userdebug,
+# allow for all builds in a non-conflicting manner.
+
+domain_auto_trans(init, logcat_exec, logpersist)
+
+# Read from logd.
+unix_socket_connect(logpersist, logdr, logd)
+
+# Write to /dev/ttyS2 and /dev/ttyGF2.
+allow logpersist serial_device:chr_file { write open };
+get_prop(logpersist, qemu_cmdline)