Fix the app_ndk policy boolean allow rule.

96bf5059 · Michal Mašek · Stephen Smalley · e1c545d8 · 96bf5059
Commit 96bf5059 authored 12 years ago by Michal Mašek Committed by Stephen Smalley 12 years ago
--- a/app.te
+++ b/app.te
@@ -103,7 +103,7 @@ allow untrusted_app sdcard:file create_file_perms;
 # Native app support.
 bool app_ndk false;
 if (app_ndk) {
-allow untrusted_app app_data_file:file execute;
+allow untrusted_app system_data_file:file { execute open };
 }

 #