Merge "Typedef+rules for SysSer to access persistent block device"

device.te

@@ -64,3 +64,6 @@ type rpmsg_device, dev_type;
 
 # Partition layout block device
 type root_block_device, dev_type;
+
+# Persistent data block device
+type persistent_data_block_device, dev_type;

system_server.te

@@ -380,6 +380,11 @@ allow system_server keystore:keystore_key {
 	clear_uid
 };
 
+# Allow system server to search and write to the persistent data block device
+# This block device does not get wiped in a factory reset.
+allow system_server persistent_data_block_device:blk_file rw_file_perms;
+allow system_server block_device:dir search;
+
 ###
 ### Neverallow rules
 ###