Skip to content
Snippets Groups Projects
Commit 524b0650 authored by Jiyong Park's avatar Jiyong Park Committed by android-build-merger
Browse files

Merge "sepolicy: allow apps to execute libs embedded inside vendor apk" into oc-dev 

am: a82c3d57

Change-Id: I332b2e50b5057016ad6b530f7660c95bd53af4b7
parents 35e09523 a82c3d57
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 1 addition and 0 deletions
private/app.te
+ 1
− 0
View file @ 524b0650
...@@ -114,6 +114,7 @@ full_treble_only(` ...@@ -114,6 +114,7 @@ full_treble_only(`
# Allow apps access to /vendor/app except for privileged # Allow apps access to /vendor/app except for privileged
# apps which cannot be in /vendor. # apps which cannot be in /vendor.
r_dir_file({ appdomain -ephemeral_app -untrusted_v2_app }, vendor_app_file) r_dir_file({ appdomain -ephemeral_app -untrusted_v2_app }, vendor_app_file)
allow { appdomain -ephemeral_app -untrusted_v2_app } vendor_app_file:file execute;
# Allow apps access to /vendor/overlay # Allow apps access to /vendor/overlay
r_dir_file(appdomain, vendor_overlay_file) r_dir_file(appdomain, vendor_overlay_file)
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment