diff --git a/prebuilts/api/31.0/private/odrefresh.te b/prebuilts/api/31.0/private/odrefresh.te index 7a642475c..3db1ae8c2 100644 --- a/prebuilts/api/31.0/private/odrefresh.te +++ b/prebuilts/api/31.0/private/odrefresh.te @@ -21,9 +21,15 @@ allow odrefresh apex_art_staging_data_file:file create_file_perms; # Run dex2oat in its own sandbox. domain_auto_trans(odrefresh, dex2oat_exec, dex2oat) +# Allow odrefresh to kill dex2oat if compilation times out. +allow odrefresh dex2oat:process sigkill; + # Run dexoptanalyzer in its own sandbox. domain_auto_trans(odrefresh, dexoptanalyzer_exec, dexoptanalyzer) +# Allow odrefresh to kill dexoptanalyzer if analysis times out. +allow odrefresh dexoptanalyzer:process sigkill; + # Use devpts and fd from odsign (which exec()'s odrefresh) allow odrefresh odsign_devpts:chr_file { read write }; allow odrefresh odsign:fd use;