From acbda50484f7d61fc2cdd9b64e52f30863185bf9 Mon Sep 17 00:00:00 2001
From: Calin Juravle <calin@google.com>
Date: Wed, 29 Nov 2017 18:35:04 -0800
Subject: [PATCH] Allow system server to getattr profile_data_files
This is needed in order to get the stat-size of the files.
Bug: 30934496
Test: gts-tradefed -m GtsAndroidRuntimeManagerHostTestCases
Change-Id: I1df0ba941e8f9ff13a23df4063acc3c4f1555c1b
---
private/system_server.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/private/system_server.te b/private/system_server.te
index 65fb7dec5..2102391ce 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -727,7 +727,7 @@ with_asan(`
# System server never reads the actual content. It passes the descriptor to
# to privileged apps which acquire the permissions to inspect the profiles.
allow system_server user_profile_data_file:dir { search };
-allow system_server user_profile_data_file:file { open read };
+allow system_server user_profile_data_file:file { getattr open read };
###
### Neverallow rules
--
GitLab