Skip to content
Snippets Groups Projects
Commit 96fcd763 authored by Calin Juravle's avatar Calin Juravle Committed by android-build-merger
Browse files

Allow system server to open profiles am: 15da30b6 am: 8e4bedd4 

am: 61fda6ff

Change-Id: I0d32791787c517a638096da2ef0bcc0bc43ab7e4
parents 3c0a5207 61fda6ff
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
private/system_server.te
+ 7
− 0
View file @ 96fcd763
......@@ -722,6 +722,13 @@ with_asan(`
allow system_server zygote_exec:file rx_file_perms;
')
# ART Profiles.
# Allow system_server to open profile snapshots for read.
# System server never reads the actual content. It passes the descriptor to
# to privileged apps which acquire the permissions to inspect the profiles.
allow system_server user_profile_data_file:dir { search };
allow system_server user_profile_data_file:file { open read };
###
### Neverallow rules
###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment