Merge "sepolicy: broaden system_server access to foreign_dex_data_file." into nyc-dev

am: ed413a82

* commit 'ed413a82':
  sepolicy: broaden system_server access to foreign_dex_data_file.

Change-Id: If6ef21fdca0da453a6bbf2093c2704a3e72c9bcf

system_server.te

@@ -15,8 +15,8 @@ allow system_server dalvikcache_data_file:dir r_dir_perms;
 # We need search on top level directories so that we can get to the files
 allow system_server user_profile_data_file:dir search;
 allow system_server user_profile_data_file:file getattr;
-allow system_server user_profile_foreign_dex_data_file:dir { open read write search remove_name };
-allow system_server user_profile_foreign_dex_data_file:file { getattr unlink };
+allow system_server user_profile_foreign_dex_data_file:dir { add_name open read write search remove_name };
+allow system_server user_profile_foreign_dex_data_file:file { getattr rename unlink };
 
 # /data/resource-cache
 allow system_server resourcecache_data_file:file r_file_perms;