Merge "Add dex2oat permissions to open and read the tmp apk." into oc-dev

67f40ec5 · Jeff Hao · Android (Google) Code Review · 5f22a4dd · 37f5c2d9 · 67f40ec5
Commit 67f40ec5 authored 7 years ago by Jeff Hao Committed by Android (Google) Code Review 7 years ago
--- a/public/dex2oat.te
+++ b/public/dex2oat.te
@@ -27,7 +27,8 @@ allow dex2oat system_file:file lock;
 allow dex2oat asec_apk_file:file read;
 allow dex2oat unlabeled:file read;
 allow dex2oat oemfs:file read;
-allow dex2oat apk_tmp_file:file read;
+allow dex2oat apk_tmp_file:dir search;
+allow dex2oat apk_tmp_file:file r_file_perms;
 allow dex2oat user_profile_data_file:file { getattr read lock };

 # Allow dex2oat to compile app's secondary dex files which were reported back to