tree 60709dfa0dfdcb796141f712848b81e4f003b6fc
parent c24d90cb5991ee53842c8fddf526187767ec92ec
author Andres Morales <anmorales@google.com> 1428104793 -0700
committer Andres Morales <anmorales@google.com> 1428364018 -0700

SELinux permissions for gatekeeper TEE proxy

sets up:
- execute permissions
- binder permission (system_server->gatekeeper->keystore)
- prevents dumpstate and shell from finding GK binder service
- neverallow rules for prohibited clients

Change-Id: I1817933a91de625db469a20c7a4c8e2ca46efa1e