sepolicy: Allow vppservice denials

log1cs · luk1337 · commit 74efe9df2841 · 2026-01-15T16:09:37.000+01:00
- Allow it to read vendor.sys.listeners.registered.
- Also allow vppservice to find secd.

Change-Id: I68554ce4039376a34fd272bd6c25ce64e675da36
diff --git a/sepolicy/qti/vendor/vendor_vppservice.te b/sepolicy/qti/vendor/vendor_vppservice.te
@@ -1,3 +1,8 @@
+binder_call(vendor_vppservice, vendor_hal_secd_default)
+
 hal_client_domain(vendor_vppservice, vendor_hal_qconfig)
 
 allow vendor_vppservice hal_swiqi_hwservice:hwservice_manager { find add };
+allow vendor_vppservice vendor_hal_secd_hwservice:hwservice_manager find;
+
+get_prop(vendor_vppservice, vendor_tee_listener_prop)
