Skip to content
Snippets Groups Projects
Commit 8e4bedd4 authored by Calin Juravle's avatar Calin Juravle Committed by android-build-merger
Browse files

Allow system server to open profiles

am: 15da30b6

Change-Id: I6a06b84d6319680d73d38ec16ca6e142d79290d1
parents ab35e434 15da30b6
Branches
Tags
No related merge requests found
...@@ -720,6 +720,13 @@ with_asan(` ...@@ -720,6 +720,13 @@ with_asan(`
allow system_server zygote_exec:file rx_file_perms; allow system_server zygote_exec:file rx_file_perms;
') ')
# ART Profiles.
# Allow system_server to open profile snapshots for read.
# System server never reads the actual content. It passes the descriptor to
# to privileged apps which acquire the permissions to inspect the profiles.
allow system_server user_profile_data_file:dir { search };
allow system_server user_profile_data_file:file { open read };
### ###
### Neverallow rules ### Neverallow rules
### ###
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment