Allow apps to read keychain_data_file links

am: f247dcba Change-Id: Ie24129d68ee32fe0178dd0fe4aea4208e72f050f

Allow apps to read keychain_data_file links
a3f6339a · Chad Brubaker · android-build-merger · 9b5b32c0 · f247dcba · a3f6339a
Commit a3f6339a authored 8 years ago by Chad Brubaker Committed by android-build-merger 8 years ago
--- a/app.te
+++ b/app.te
@@ -75,8 +75,7 @@ allow { appdomain -isolated_app } app_data_file:notdevfile_class_set create_file
 allow appdomain mnt_expand_file:dir r_dir_perms;

 # Keychain and user-trusted credentials
-allow appdomain keychain_data_file:dir r_dir_perms;
-allow appdomain keychain_data_file:file r_file_perms;
+r_dir_file(appdomain, keychain_data_file)
 allow appdomain misc_user_data_file:dir r_dir_perms;
 allow appdomain misc_user_data_file:file r_file_perms;