Merge "sepolicy_vndr: add sepolicy rules for trinket target."
diff --git a/qva/vendor/bengal/genfs_contexts b/qva/vendor/bengal/genfs_contexts
index d195d54..9514656 100644
--- a/qva/vendor/bengal/genfs_contexts
+++ b/qva/vendor/bengal/genfs_contexts
@@ -191,6 +191,8 @@
genfscon sysfs /devices/platform/soc/b300000.remoteproc-cdsp/remoteproc/remoteproc1/recovery u:object_r:vendor_sysfs_ssr_toggle:s0
genfscon sysfs /devices/platform/soc/6080000.remoteproc-mss/remoteproc/remoteproc2/name u:object_r:vendor_sysfs_ssr:s0
genfscon sysfs /devices/platform/soc/6080000.remoteproc-mss/remoteproc/remoteproc2/recovery u:object_r:vendor_sysfs_ssr_toggle:s0
+genfscon sysfs /devices/platform/soc/6080000.remoteproc-mss/remoteproc/remoteproc1/name u:object_r:vendor_sysfs_ssr:s0
+genfscon sysfs /devices/platform/soc/6080000.remoteproc-mss/remoteproc/remoteproc1/recovery u:object_r:vendor_sysfs_ssr_toggle:s0
genfscon sysfs /devices/platform/soc/soc:qfprom@0/feat_conf10 u:object_r:vendor_sysfs_qfprom:s0
genfscon sysfs /devices/platform/soc/4744000.sdhci/mmc_host/mmc0/mmc0:0001/block/mmcblk0/queue/read_ahead_kb u:object_r:vendor_sysfs_mmc_host:s0
diff --git a/qva/vendor/common/dumpstate.te b/qva/vendor/common/dumpstate.te
index 07af07b..8d1b508 100644
--- a/qva/vendor/common/dumpstate.te
+++ b/qva/vendor/common/dumpstate.te
@@ -48,3 +48,4 @@
binder_call(dumpstate, vendor_qms)
binder_call(dumpstate, hal_bluetooth_default)
binder_call(dumpstate, vendor_ims_dcservice)
+binder_call(dumpstate, vendor_hal_qspa_default)
diff --git a/qva/vendor/kona/app.te b/qva/vendor/kona/app.te
new file mode 100644
index 0000000..1ce98dd
--- /dev/null
+++ b/qva/vendor/kona/app.te
@@ -0,0 +1,5 @@
+# Copyright (c) 2023 Qualcomm Innovation Center, Inc. All rights reserved.
+# SPDX-License-Identifier: BSD-3-Clause-Clear
+
+# Allow access to non-secure fastrpc device for untrusted applications
+allow appdomain vendor_qdsp_device:chr_file {ioctl read};