nx: sepolicy: Allow dockservice_app to set several properties

* And allow dockservice_app to set them.

Change-Id: I48a88690a56bcc4e8c6084b94674e22942bd74cd

sepolicy/vendor/dockservice_app.te

@@ -51,3 +51,9 @@ allow dockservice_app hal_power_service:service_manager find;
 allow dockservice_app joycon_service:service_manager find;
 
 allow dockservice_app joycond:binder call;
+
+# Allow settings persist.devicesettingsnx.* properties - NEVERALLOW
+set_prop(dockservice_app, vendor_persist_devicesettingsnx_prop)
+
+# Allow dockservice to set persist.joycond.* properties - NEVERALLOW
+set_prop(dockservice_app, vendor_persist_joycond_prop)

sepolicy/vendor/property.te

@@ -1,2 +1,5 @@
+# DeviceSettings Properties
+vendor_public_prop(vendor_persist_devicesettingsnx_prop)
+
 # IIO Sensors
 vendor_public_prop(vendor_iio_sensors_prop);

sepolicy/vendor/property_contexts

@@ -1,2 +1,5 @@
+# DeviceSettings Properties
+persist.devicesettingsnx. u:object_r:vendor_persist_devicesettingsnx_prop:s0
+
 # IIO Sensors
 ro.vendor.iio. u:object_r:vendor_iio_sensors_prop:s0