From 8337d04202219b59680e8af47d88c6625eeb03f8 Mon Sep 17 00:00:00 2001
From: Andy Yu <chingtangyu@google.com>
Date: Fri, 25 Mar 2022 11:08:59 -0700
Subject: [PATCH] Add label and permission for game_mode_intervention.list

Bug: 219543620
Doc: go/game-dashboard-information-to-perfetto
Test: TBD
Change-Id: Ic6622aadef05e22c95d4ba739beed0e6fa1f3a38
---
 private/compat/32.0/32.0.ignore.cil | 1 +
 private/file_contexts               | 1 +
 private/system_server.te            | 1 +
 public/file.te                      | 1 +
 4 files changed, 4 insertions(+)

diff --git a/private/compat/32.0/32.0.ignore.cil b/private/compat/32.0/32.0.ignore.cil
index 3547ebb33..ceb54b158 100644
--- a/private/compat/32.0/32.0.ignore.cil
+++ b/private/compat/32.0/32.0.ignore.cil
@@ -25,6 +25,7 @@
     extra_free_kbytes
     extra_free_kbytes_exec
     fs_bpf_vendor
+    game_mode_intervention_list_file
     gesture_prop
     hal_contexthub_service
     hal_camera_service
diff --git a/private/file_contexts b/private/file_contexts
index e2ffbc089..b07583931 100644
--- a/private/file_contexts
+++ b/private/file_contexts
@@ -527,6 +527,7 @@
 /data/(.*)?		u:object_r:system_data_file:s0
 /data/system/environ(/.*)? u:object_r:environ_system_data_file:s0
 /data/system/packages\.list u:object_r:packages_list_file:s0
+/data/system/game_mode_intervention\.list u:object_r:game_mode_intervention_list_file:s0
 /data/unencrypted(/.*)?         u:object_r:unencrypted_data_file:s0
 /data/backup(/.*)?		u:object_r:backup_data_file:s0
 /data/secure/backup(/.*)?	u:object_r:backup_data_file:s0
diff --git a/private/system_server.te b/private/system_server.te
index a927a8366..30d261d91 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -472,6 +472,7 @@ allow system_server ota_package_file:file create_file_perms;
 allow system_server system_data_file:dir create_dir_perms;
 allow system_server system_data_file:notdevfile_class_set create_file_perms;
 allow system_server packages_list_file:file create_file_perms;
+allow system_server game_mode_intervention_list_file:file create_file_perms;
 allow system_server keychain_data_file:dir create_dir_perms;
 allow system_server keychain_data_file:file create_file_perms;
 allow system_server keychain_data_file:lnk_file create_file_perms;
diff --git a/public/file.te b/public/file.te
index 3c8fcc795..55f65b659 100644
--- a/public/file.te
+++ b/public/file.te
@@ -301,6 +301,7 @@ type system_data_file, file_type, data_file_type, core_data_file_type;
 # TODO(b/129332765): Narrow down permissions to this.
 # Find out users of system_data_file that should be granted only this.
 type packages_list_file, file_type, data_file_type, core_data_file_type;
+type game_mode_intervention_list_file, file_type, data_file_type, core_data_file_type;
 # Default type for anything under /data/vendor{_ce,_de}.
 type vendor_data_file, file_type, data_file_type;
 # Unencrypted data