From a7915ceb9db78d5255573ee3083e1db15a268dbe Mon Sep 17 00:00:00 2001 From: Jeff Vander Stoep <jeffv@google.com> Date: Tue, 19 Jul 2016 12:42:57 -0700 Subject: [PATCH] adbd: allow reading apk_data_file (cherry picked from commit d743ddeab5ac1ee6bbf14e8d0ee3a56a836aa4f9) avc: denied { search } for comm=73657276696365203139 name="app" dev="sda35" ino=770049 scontext=u:r:adbd:s0 tcontext=u:object_r:apk_data_file:s0 tclass=dir permissive=0 Bug: 30000600 Change-Id: I86958ebcca815ee1779f85fb425592493f40101a --- adbd.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/adbd.te b/adbd.te index 9dc41fd94..83a271bd1 100644 --- a/adbd.te +++ b/adbd.te @@ -111,3 +111,5 @@ allow adbd mnt_user_file:lnk_file r_file_perms; # accesses to the underlying FS. allow adbd media_rw_data_file:dir create_dir_perms; allow adbd media_rw_data_file:file create_file_perms; + +r_dir_file(adbd, apk_data_file) -- GitLab