Add the screen cast sepolicy

graphics/screencast/cast_client_app.te

@@ -0,0 +1,29 @@
+type cast_client_app, domain, coredomain, socket_between_core_and_vendor_violators;
+
+app_domain(cast_client_app)
+net_domain(cast_client_app)
+
+#============= cast_client_app ==============
+allow cast_client_app cast_app_data_file:dir create_dir_perms;
+allow cast_client_app cast_app_data_file:file create_file_perms;
+allow cast_client_app socket_device:dir { add_name remove_name search write };
+allow cast_client_app dm_disp_socket:sock_file { write read open unlink create};
+allow cast_client_app dm_disp_socket:file { write read open unlink create};
+allow cast_client_app dm_client_socket:sock_file { write read open unlink create};
+allow cast_client_app dm_client_socket:file { write read open unlink create};
+allow cast_client_app socket_device:sock_file create;
+
+allow cast_client_app activity_service:service_manager find;
+allow cast_client_app activity_task_service:service_manager find;
+allow cast_client_app content_capture_service:service_manager find;
+allow cast_client_app game_service:service_manager find;
+allow cast_client_app gpu_service:service_manager find;
+allow cast_client_app netstats_service:service_manager find;
+allow cast_client_app surfaceflinger_service:service_manager find;
+allow cast_client_app sysfs_gpu:dir search;
+allow cast_client_app vendor_intel_render_selection_prop:file open;
+allow cast_client_app virtual_device_service:service_manager find;
+allow cast_client_app voiceinteraction_service:service_manager find;
+allow cast_client_app vendor_intel_render_selection_prop:file { read getattr map };
+
+dontaudit cast_client_app default_prop:file *;

graphics/screencast/cast_server.te

@@ -0,0 +1,8 @@
+type cast_server, domain, mlstrustedsubject, coredomain;
+type cast_server_exec, system_file_type, exec_type, file_type;
+
+init_daemon_domain(cast_server)
+
+allow cast_server socket_device:dir { add_name remove_name search write };
+allow cast_server dm_disp_socket:sock_file { create write getattr unlink read open };
+allow cast_server dm_client_socket:sock_file { create write getattr unlink read open };

graphics/screencast/file.te

@@ -0,0 +1,3 @@
+type cast_app_data_file, file_type, data_file_type, app_data_file_type;
+type dm_disp_socket, file_type, coredomain_socket;
+type dm_client_socket, file_type, coredomain_socket;

graphics/screencast/file_contexts

@@ -0,0 +1,3 @@
+/system/bin/acrn-bkend-server             u:object_r:cast_server_exec:s0
+/dev/socket/virt_disp_server              u:object_r:dm_disp_socket:s0
+/dev/socket/virt_disp_client              u:object_r:dm_client_socket:s0

system_ext/private/seapp_contexts

@@ -0,0 +1 @@
+user=_app seinfo=platform name=com.intel.dm_backend domain=cast_client_app type=cast_app_data_file