Skip to content
Snippets Groups Projects
Commit 96d9af42 authored by Nick Kralevich's avatar Nick Kralevich
Browse files

allow system_server getattr on /data/dalvik-cache/profiles

86703051 wasn't complete. I thought
getattr on the directory wasn't needed but I was wrong. Not sure
how I missed this.

Addresses the following denial:

  <4>[   40.699344] type=1400 audit(15795140.469:9): avc: denied { getattr } for pid=1087 comm="system_server" path="/data/dalvik-cache/profiles" dev="mmcblk0p28" ino=105874 scontext=u:r:system_server:s0 tcontext=u:object_r:dalvikcache_profiles_data_file:s0 tclass=dir

Change-Id: Ibc176b2b00083bafaa91ab78d0f8dc1ca3c208b6
parent 848109c0
No related branches found
No related tags found
No related merge requests found
......@@ -196,7 +196,7 @@ allow system_server dalvikcache_data_file:dir create_dir_perms;
allow system_server dalvikcache_data_file:file create_file_perms;
# Read from /data/dalvik-cache/profiles
allow system_server dalvikcache_profiles_data_file:dir w_dir_perms;
allow system_server dalvikcache_profiles_data_file:dir { getattr w_dir_perms };
allow system_server dalvikcache_profiles_data_file:file create_file_perms;
# Manage /data/misc/adb.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment