Allow sepolicies granting bootanim exec on /oem.

am: 6a1e6a9c Change-Id: I2584b969c384083fc3601a2213cf0037d4e88bda

Allow sepolicies granting bootanim exec on /oem.
6fea1f4f · Ed Coyne · android-build-merger · 9d23d8eb · 6a1e6a9c · 6fea1f4f
Commit 6fea1f4f authored 7 years ago by Ed Coyne Committed by android-build-merger 7 years ago
--- a/public/domain.te
+++ b/public/domain.te
@@ -368,6 +368,7 @@ neverallow {
 neverallow {
    domain
    -appdomain # for oemfs
+    -bootanim # for oemfs
    -recovery # for /tmp/update_binary in tmpfs
 } { fs_type -rootfs }:file execute;
 # Files from cache should never be executed