Skip to content
Snippets Groups Projects
Commit 35d2a46a authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Android (Google) Code Review
Browse files

Merge "sepolicy: Allow postinstall_dexopt /vendor/app access" into oc-dev

parents 976fb16b e843044c
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
public/domain.te
+ 2
− 0
View file @ 35d2a46a
...@@ -686,6 +686,7 @@ full_treble_only(` ...@@ -686,6 +686,7 @@ full_treble_only(`
-idmap -idmap
-init -init
-installd -installd
-postinstall_dexopt
-system_server -system_server
} vendor_app_file:dir { open read getattr search }; } vendor_app_file:dir { open read getattr search };
...@@ -696,6 +697,7 @@ full_treble_only(` ...@@ -696,6 +697,7 @@ full_treble_only(`
-idmap -idmap
-init -init
-installd -installd
-postinstall_dexopt
-system_server -system_server
} vendor_app_file:{ file lnk_file } r_file_perms; } vendor_app_file:{ file lnk_file } r_file_perms;
......
public/postinstall_dexopt.te
+ 2
− 0
View file @ 35d2a46a
...@@ -17,6 +17,8 @@ allow postinstall_dexopt tmpfs:file read; ...@@ -17,6 +17,8 @@ allow postinstall_dexopt tmpfs:file read;
# Read app data (APKs) as input to dex2oat. # Read app data (APKs) as input to dex2oat.
r_dir_file(postinstall_dexopt, apk_data_file) r_dir_file(postinstall_dexopt, apk_data_file)
# Read vendor app data (APKs) as input to dex2oat.
r_dir_file(postinstall_dexopt, vendor_app_file)
# Access to app oat directory. # Access to app oat directory.
r_dir_file(postinstall_dexopt, dalvikcache_data_file) r_dir_file(postinstall_dexopt, dalvikcache_data_file)
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment