From ab981811f288ad4078940c1c21bf96399167128c Mon Sep 17 00:00:00 2001
From: Bowgo Tsai <bowgotsai@google.com>
Date: Tue, 20 Mar 2018 01:03:04 +0000
Subject: [PATCH] Revert "Allow dexopt to follow /odm/lib(64) symlinks."
This reverts commit 88cd813fe2c537a1490dfe6d65e3adde4e13eef2.
Bug: 75287236
Test: boot a device
Change-Id: Id1bc324e7bd0722065d8a410af31fd6b7aaa9d1c
Merged-In: Id1bc324e7bd0722065d8a410af31fd6b7aaa9d1c
(cherry picked from commit 942500b910bedc9c778b330333bb7cc87d717da9)
---
public/dex2oat.te | 2 +-
public/postinstall_dexopt.te | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/public/dex2oat.te b/public/dex2oat.te
index 608ba7987..47f3bcb60 100644
--- a/public/dex2oat.te
+++ b/public/dex2oat.te
@@ -44,7 +44,7 @@ allow dex2oat postinstall_dexopt:fd use;
allow dex2oat postinstall_file:dir { getattr search };
allow dex2oat postinstall_file:filesystem getattr;
-allow dex2oat postinstall_file:lnk_file { getattr read };
+allow dex2oat postinstall_file:lnk_file read;
# Allow dex2oat access to files in /data/ota.
allow dex2oat ota_data_file:dir ra_dir_perms;
diff --git a/public/postinstall_dexopt.te b/public/postinstall_dexopt.te
index 82215300a..8881f4414 100644
--- a/public/postinstall_dexopt.te
+++ b/public/postinstall_dexopt.te
@@ -9,7 +9,7 @@ allow postinstall_dexopt self:global_capability_class_set { chown dac_override f
allow postinstall_dexopt postinstall_file:filesystem getattr;
allow postinstall_dexopt postinstall_file:dir { getattr search };
-allow postinstall_dexopt postinstall_file:lnk_file { getattr read };
+allow postinstall_dexopt postinstall_file:lnk_file read;
allow postinstall_dexopt proc_filesystems:file { getattr open read };
allow postinstall_dexopt tmpfs:file read;
--
GitLab