diff --git a/app.te b/app.te index 44cd266318599d9c042dc9ff40834d5aac8cc387..73febbcde0e8913f4033eed370757da970895613 100644 --- a/app.te +++ b/app.te @@ -131,7 +131,8 @@ allow appdomain usbaccessory_device:chr_file { read write getattr }; allow appdomain dalvikcache_data_file:file execute; # /data/dalvik-cache/profiles -allow appdomain dalvikcache_profiles_data_file:file write; +allow appdomain dalvikcache_profiles_data_file:dir { search getattr }; +allow appdomain dalvikcache_profiles_data_file:file rw_file_perms; # Allow any app to read shared RELRO files. allow appdomain shared_relro_file:dir search; diff --git a/domain.te b/domain.te index c5db6bb468eb262308d3c18c004283067011f2a2..b161467c27b346fd2b17aa36c6ec0b3b8efa73c2 100644 --- a/domain.te +++ b/domain.te @@ -101,8 +101,6 @@ allow domain apk_data_file:lnk_file r_file_perms; # Read /data/dalvik-cache. allow domain dalvikcache_data_file:dir { search getattr }; allow domain dalvikcache_data_file:file r_file_perms; -allow domain dalvikcache_profiles_data_file:dir { search getattr }; -allow domain dalvikcache_profiles_data_file:file r_file_perms; # Read already opened /cache files. allow domain cache_file:dir r_dir_perms; diff --git a/installd.te b/installd.te index 586f4262c3975651335770264dbad18cb0763058..eed034375ce7127870959f3d6d87af36b0d27d0e 100644 --- a/installd.te +++ b/installd.te @@ -46,8 +46,6 @@ allow installd dalvikcache_data_file:dir create_dir_perms; allow installd dalvikcache_data_file:file create_file_perms; # Create /data/dalvik-cache/profiles. -allow installd dalvikcache_data_file:dir relabelfrom; -allow installd dalvikcache_profiles_data_file:dir relabelto; allow installd dalvikcache_profiles_data_file:dir rw_dir_perms; allow installd dalvikcache_profiles_data_file:file create_file_perms; diff --git a/system_server.te b/system_server.te index 11a1ebec6936cb3018dfe89f0a0061369d84b49a..fc0da2bee8e6436bcb368af9b2e53d072562f4fe 100644 --- a/system_server.te +++ b/system_server.te @@ -195,6 +195,10 @@ allow system_server backup_data_file:file create_file_perms; allow system_server dalvikcache_data_file:dir create_dir_perms; allow system_server dalvikcache_data_file:file create_file_perms; +# Read from /data/dalvik-cache/profiles +allow system_server dalvikcache_profiles_data_file:dir w_dir_perms; +allow system_server dalvikcache_profiles_data_file:file create_file_perms; + # Manage /data/misc/adb. allow system_server adb_keys_file:dir create_dir_perms; allow system_server adb_keys_file:file create_file_perms;