universal7870: selinux: fix gps/gnss

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

sepolicy/file_contexts

@@ -56,6 +56,9 @@
 # Knox status
 /dev/knox_kap                u:object_r:knox_device:s0
 
+# gnss
+/dev/gnss_ipc			u:object_r:gps_device:s0
+
 # audio hal
 /dev/i2c-20			u:object_r:audio_device:s0
 

sepolicy/gpsd.te

 type gpsd, domain, netdomain;
 type gpsd_exec, exec_type, vendor_file_type, file_type;
 
+# accessing gnss device
+type gnss_device, dev_type;
+
 # gpsd is started by init, type transit from init domain to gpsd domain
 init_daemon_domain(gpsd)
 
@@ -34,3 +37,7 @@ allow gpsd fwmarkd_socket:sock_file write;
 allow gpsd gps_vendor_data_file:dir rw_dir_perms;
 allow gpsd gps_vendor_data_file:file create_file_perms;
 allow gpsd gps_vendor_data_file:fifo_file create_file_perms;
+
+allow gpsd sysfs_gps:file { open read getattr };
+allow gpsd sysfs_wake_lock:file { open write };
+allow gpsd gps_device:chr_file { read write open ioctl };

sepolicy/hal_gnss_default.te

@@ -14,3 +14,4 @@ allow hal_gnss_default mnt_vendor_file:dir search;
 #allow hal_gnss_default default_android_hwservice:hwservice_manager { add find };
 allow hal_gnss_default fwk_sensor_hwservice:hwservice_manager find;
 allow hal_gnss_default init:unix_stream_socket connectto;
+allow hal_gnss_default gpsd:unix_stream_socket connectto;