Allow apps to read keychain_data_file links am: f247dcba am: a3f6339a

am: 6269ecd0 Change-Id: Iad6cbe6b2215f125a7558e7618a82e3b97a44672

Allow apps to read keychain_data_file links am: f247dcba am: a3f6339a
2561db9a · Chad Brubaker · android-build-merger · d0d38fa2 · 6269ecd0 · 2561db9a
Commit 2561db9a authored 8 years ago by Chad Brubaker Committed by android-build-merger 8 years ago
--- a/app.te
+++ b/app.te
@@ -75,8 +75,7 @@ allow { appdomain -isolated_app } app_data_file:notdevfile_class_set create_file
 allow appdomain mnt_expand_file:dir r_dir_perms;

 # Keychain and user-trusted credentials
-allow appdomain keychain_data_file:dir r_dir_perms;
-allow appdomain keychain_data_file:file r_file_perms;
+r_dir_file(appdomain, keychain_data_file)
 allow appdomain misc_user_data_file:dir r_dir_perms;
 allow appdomain misc_user_data_file:file r_file_perms;