Sepolicy: Give sys_admin for relabel

This requirement slipped through.

Bug: 125474642
Test: m
Test: manual
Change-Id: I8b31bda519632a549574d3057bc49a158e796e2e
This commit is contained in:
Andreas Gampe 2019-03-12 10:49:16 -07:00
parent 475f6d143f
commit 7263cb4603

View File

@ -17,6 +17,7 @@ allow art_apex_postinstall dalvikcache_data_file:file { r_file_perms unlink rela
# Required for relabel.
allow art_apex_postinstall file_contexts_file:file r_file_perms;
allow art_apex_postinstall self:global_capability_class_set sys_admin;
# Script helpers.
allow art_apex_postinstall shell_exec:file rx_file_perms;