From 9357dd1314a7917567fcc6b2a91704de393775ee Mon Sep 17 00:00:00 2001
From: Devika Krishnadas <kdevika@google.com>
Date: Tue, 19 Mar 2024 01:53:36 +0000
Subject: [PATCH] Add pixel mapper service context

Bug: 267352318
Test: Build & check SELinux denials

Change-Id: I763f49d2ef38ae0ab5c1ee1652957f6512f8fbc6
Signed-off-by: Devika Krishnadas <kdevika@google.com>
---
 gpu/sepolicy/service_contexts | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 gpu/sepolicy/service_contexts

diff --git a/gpu/sepolicy/service_contexts b/gpu/sepolicy/service_contexts
new file mode 100644
index 0000000..88ee08c
--- /dev/null
+++ b/gpu/sepolicy/service_contexts
@@ -0,0 +1,4 @@
+# Note that native/passthrough HALs use the "{type}/{instance}" pattern from
+# SEPolicy perspective and are looked up via the corresponding filename
+# "{type}.{instance}.so".
+mapper/pixel u:object_r:hal_graphics_mapper_service:s0