Move SELinux diag_device policy to userdebug/eng.
Also just remove all specific domain access and instead
allow diag_device access for all domains on the
userdebug/user builds.
Change-Id: I2a35de3d4d407fad97e3b3ef9fadef962ecff901
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
diff --git a/sepolicy/domain.te b/sepolicy/domain.te
new file mode 100644
index 0000000..07223d1
--- /dev/null
+++ b/sepolicy/domain.te
@@ -0,0 +1,3 @@
+userdebug_or_eng(`
+ allow domain diag_device:chr_file rw_file_perms;
+')