From 9738638c03e9e7843d8ee5d8bfb276ae7d559011 Mon Sep 17 00:00:00 2001
From: Andrew Scull <ascull@google.com>
Date: Thu, 17 Feb 2022 12:35:22 +0000
Subject: [PATCH] Let the DICE HAL getattr the device node

Make sure all the permissions are granted to let the HAL do its work
properly.

Bug: 214231981
Test: atest MicrodroidTestApp
Change-Id: I54c633b8163ea313c87856fb0513074a76ac86a1
---
 microdroid/vendor/hal_dice_default.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/microdroid/vendor/hal_dice_default.te b/microdroid/vendor/hal_dice_default.te
index c20355079..3536ae14e 100644
--- a/microdroid/vendor/hal_dice_default.te
+++ b/microdroid/vendor/hal_dice_default.te
@@ -7,4 +7,4 @@ init_daemon_domain(hal_dice_default)
 # hal_dice_default is using bootstrap bionic
 use_bootstrap_libs(hal_dice_default)
 
-allow hal_dice_default open_dice_device:chr_file { read write open map };
+allow hal_dice_default open_dice_device:chr_file rw_file_perms;