PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "sepolicy: Allow postinstall_dexopt /vendor/app access" into oc-dev am: 35d2a46ad3

Browse Source 
am: fd36f77d17

Change-Id: I32567c69423546a49441dcc106ff599ffc7e869a
This commit is contained in:
Andreas Gampe 2017-04-12 18:23:07 +00:00 committed by android-build-merger
commit b108be431a
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
public/domain.te
View File

@ -686,6 +686,7 @@ full_treble_only(`
-idmap
-init
-installd
-postinstall_dexopt
-system_server
} vendor_app_file:dir { open read getattr search };
@ -696,6 +697,7 @@ full_treble_only(`
-idmap
-init
-installd
-postinstall_dexopt
-system_server
} vendor_app_file:{ file lnk_file } r_file_perms;

2
public/postinstall_dexopt.te
View File

@ -17,6 +17,8 @@ allow postinstall_dexopt tmpfs:file read;
# Read app data (APKs) as input to dex2oat.
r_dir_file(postinstall_dexopt, apk_data_file)
# Read vendor app data (APKs) as input to dex2oat.
r_dir_file(postinstall_dexopt, vendor_app_file)
# Access to app oat directory.
r_dir_file(postinstall_dexopt, dalvikcache_data_file)