From a76d9ddf6bf8f0ee0768a2129fa7606f66b0b510 Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Fri, 13 Jun 2014 21:29:56 -0700
Subject: [PATCH] system_server profile access
Still not fixed. *sigh*
Addresses the following denial:
<4>[ 40.515398] type=1400 audit(15842931.469:9): avc: denied { read } for pid=814 comm="system_server" name="profiles" dev="mmcblk0p28" ino=105874 scontext=u:r:system_server:s0 tcontext=u:object_r:dalvikcache_profiles_data_file:s0 tclass=dir
Change-Id: I705a4cc9c508200ace46780c18b7112b62f27994
---
system_server.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/system_server.te b/system_server.te
index a9e5f82fc..ffed556e2 100644
--- a/system_server.te
+++ b/system_server.te
@@ -196,7 +196,7 @@ allow system_server dalvikcache_data_file:dir create_dir_perms;
allow system_server dalvikcache_data_file:file create_file_perms;
# Read from /data/dalvik-cache/profiles
-allow system_server dalvikcache_profiles_data_file:dir { getattr w_dir_perms };
+allow system_server dalvikcache_profiles_data_file:dir rw_dir_perms;
allow system_server dalvikcache_profiles_data_file:file create_file_perms;
# Manage /data/misc/adb.
--
GitLab