Merge "SELinux policies for the OEM lock HAL." into oc-dev

private/system_server.te

@@ -181,6 +181,7 @@ hal_client_domain(system_server, hal_graphics_allocator)
 hal_client_domain(system_server, hal_ir)
 hal_client_domain(system_server, hal_light)
 hal_client_domain(system_server, hal_memtrack)
+hal_client_domain(system_server, hal_oemlock)
 allow system_server hal_omx_hwservice:hwservice_manager find;
 allow system_server hidl_token_hwservice:hwservice_manager find;
 hal_client_domain(system_server, hal_power)

public/attributes

@@ -232,6 +232,9 @@ attribute hal_memtrack_server;
 attribute hal_nfc;
 attribute hal_nfc_client;
 attribute hal_nfc_server;
+attribute hal_oemlock;
+attribute hal_oemlock_client;
+attribute hal_oemlock_server;
 attribute hal_power;
 attribute hal_power_client;
 attribute hal_power_server;

public/hal_oemlock.te

+# HwBinder IPC from client to server
+# binder_call(hal_oemlock_client, hal_oemlock_server)