diff --git a/private/bug_map b/private/bug_map index ee9abee1ec21101ad0fb9367a188ddc7bf48c830..1ff1ffeb41f526133c206e09cb6b22581cc1dd59 100644 --- a/private/bug_map +++ b/private/bug_map @@ -7,7 +7,6 @@ priv_app sysfs dir 72749888 priv_app sysfs_android_usb file 72749888 priv_app system_data_file dir 72811052 system_server crash_dump process 73128755 -system_server vendor_framework_file dir 68826235 untrusted_app_25 system_data_file dir 72550646 untrusted_app_27 system_data_file dir 72550646 usbd usbd capability 72472544 diff --git a/private/system_server.te b/private/system_server.te index 02d01f4ff97cc49e895a2fd15c3e974d0b1c0a75..75f4d345547a8f211befc5c761685e7ced6f0d0a 100644 --- a/private/system_server.te +++ b/private/system_server.te @@ -336,10 +336,9 @@ allow system_server apk_data_file:{ file lnk_file } { create_file_perms link }; allow system_server apk_tmp_file:dir create_dir_perms; allow system_server apk_tmp_file:file create_file_perms; -# Access /vendor/app +# Access /vendor/{app,framework,overlay} r_dir_file(system_server, vendor_app_file) - -# Access /vendor/app +r_dir_file(system_server, vendor_framework_file) r_dir_file(system_server, vendor_overlay_file) # Manage /data/app-private.