am 4b683d24: am 7004789d: Add policies for Atomic Display Framework

* commit '4b683d24':
  Add policies for Atomic Display Framework

app.te

@@ -191,8 +191,10 @@ neverallow { appdomain -unconfineddomain } {
 }:chr_file { read write };
 
 # Note: Try expanding list of app domains in the future.
-neverallow { untrusted_app isolated_app shell -unconfineddomain }
-    graphics_device:chr_file { read write };
+neverallow { untrusted_app isolated_app shell -unconfineddomain } {
+    adf_device
+    graphics_device
+}:chr_file { read write };
 
 neverallow { appdomain -nfc -unconfineddomain } nfc_device:chr_file
     { read write };

device.te

@@ -2,6 +2,7 @@
 type device, dev_type, fs_type;
 type alarm_device, dev_type, mlstrustedobject;
 type adb_device, dev_type;
+type adf_device, dev_type;
 type ashmem_device, dev_type, mlstrustedobject;
 type audio_device, dev_type;
 type binder_device, dev_type, mlstrustedobject;

file_contexts

@@ -31,6 +31,9 @@
 /dev(/.*)?		u:object_r:device:s0
 /dev/akm8973.*		u:object_r:sensors_device:s0
 /dev/accelerometer	u:object_r:sensors_device:s0
+/dev/adf[0-9]*		u:object_r:adf_device:s0
+/dev/adf-interface[0-9]*\.[0-9]*	u:object_r:adf_device:s0
+/dev/adf-overlay-engine[0-9]*\.[0-9]*	u:object_r:adf_device:s0
 /dev/alarm		u:object_r:alarm_device:s0
 /dev/android_adb.*	u:object_r:adb_device:s0
 /dev/ashmem		u:object_r:ashmem_device:s0

healthd.te

@@ -23,6 +23,7 @@ allow healthd sysfs:file write;
 ### healthd: charger mode
 ###
 
+allow healthd adf_device:chr_file rw_file_perms;
 allow healthd graphics_device:dir r_dir_perms;
 allow healthd graphics_device:chr_file rw_file_perms;
 allow healthd input_device:dir r_dir_perms;

surfaceflinger.te

@@ -30,6 +30,9 @@ allow surfaceflinger gpu_device:chr_file rw_file_perms;
 allow surfaceflinger graphics_device:dir search;
 allow surfaceflinger graphics_device:chr_file rw_file_perms;
 
+# Access ADF device nodes.
+allow surfaceflinger adf_device:chr_file rw_file_perms;
+
 # Access /dev/video1.
 allow surfaceflinger video_device:dir r_dir_perms;
 allow surfaceflinger video_device:chr_file rw_file_perms;