Apps need more than just search.

avc: denied { getattr } for path="/storage/self" dev="tmpfs" ino=3129 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:mnt_user_file:s0 tclass=dir permissive=0

Change-Id: I802321331e9bd7ae41d3af7ace39364240db6d84

adbd.te

@@ -91,5 +91,5 @@ allow adbd bootchart_data_file:file r_file_perms;
 # and symlinks to primary storage at places like /storage/sdcard0 and /mnt/user/0/primary
 allow adbd storage_file:dir r_dir_perms;
 allow adbd storage_file:lnk_file r_file_perms;
-allow adbd mnt_user_file:dir search;
+allow adbd mnt_user_file:dir r_dir_perms;
 allow adbd mnt_user_file:lnk_file r_file_perms;

app.te

@@ -128,7 +128,7 @@ allow appdomain radio_data_file:file { read write getattr };
 # and symlinks to primary storage at places like /storage/sdcard0 and /mnt/user/0/primary
 allow appdomain storage_file:dir r_dir_perms;
 allow appdomain storage_file:lnk_file r_file_perms;
-allow appdomain mnt_user_file:dir search;
+allow appdomain mnt_user_file:dir r_dir_perms;
 allow appdomain mnt_user_file:lnk_file r_file_perms;
 
 # Read/write visible storage