From aa2a33a2097f7fbd6f6b6bff4dbceeaf46b81325 Mon Sep 17 00:00:00 2001
From: Amith Yamasani <yamasani@google.com>
Date: Wed, 6 Jul 2016 10:56:53 -0700
Subject: [PATCH] Allow apps to read preloaded photos

(cherry picked from commit e01654f98258461448d1761914e32bdad491ec6f)

For Retail Demo mode, we need to preload photos in
/data/preloads and allow regular apps to access the
photos returned by the media provider from the preloads
directory.

Bug: 29940807
Change-Id: Ic1061dac55ace1b125ae04b5b0c70aae9aa0c732
---
 untrusted_app.te | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/untrusted_app.te b/untrusted_app.te
index 310f1f35d..b968728b2 100644
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -94,6 +94,10 @@ allow untrusted_app self:process ptrace;
 allow untrusted_app sysfs_hwrandom:dir search;
 allow untrusted_app sysfs_hwrandom:file r_file_perms;
 
+# Allow apps to view preloaded content
+allow untrusted_app preloads_data_file:dir r_dir_perms;
+allow untrusted_app preloads_data_file:file r_file_perms;
+
 ###
 ### neverallow rules
 ###
-- 
GitLab