From 44c95e9a26ff496a609f0f802d5937225a6f910f Mon Sep 17 00:00:00 2001
From: Jeff Sharkey <jsharkey@android.com>
Date: Mon, 6 Apr 2015 21:06:34 -0700
Subject: [PATCH] Allow installd to dexopt apps on expanded storage.

avc: denied { search } for name="expand" dev="tmpfs" ino=3130 scontext=u:r:installd:s0 tcontext=u:object_r:mnt_expand_file:s0 tclass=dir permissive=0

Bug: 19993667
Change-Id: Ie53df62aa79ae14cd56d7c6f2429b4be382164d1
---
 installd.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/installd.te b/installd.te
index 2187a1568..6c7fea4eb 100644
--- a/installd.te
+++ b/installd.te
@@ -16,6 +16,7 @@ allow installd oemfs:dir r_dir_perms;
 allow installd oemfs:file r_file_perms;
 allow installd system_file:file x_file_perms;
 allow installd cgroup:dir create_dir_perms;
+allow installd mnt_expand_file:dir search;
 # Check validity of SELinux context before use.
 selinux_check_context(installd)
 # Read /seapp_contexts and /data/security/seapp_contexts
-- 
GitLab