Allow update_engine to read postinstall_mnt_dir am: 8f687053

am: 0bcb2030 Change-Id: I9937141ff425f437d46463bdb944e4524f8d8aa1

Allow update_engine to read postinstall_mnt_dir am: 8f687053
b197b7c8 · Tianjie Xu · android-build-merger · a0804de2 · 0bcb2030 · b197b7c8
Commit b197b7c8 authored Jul 18, 2017 by Tianjie Xu Committed by android-build-merger Jul 18, 2017
--- a/public/update_engine_common.te
+++ b/public/update_engine_common.te
@@ -19,7 +19,7 @@ allow update_engine_common rootfs:file r_file_perms;
 # Allow update_engine_common to mount on the /postinstall directory and reset the
 # labels on the mounted filesystem to postinstall_file.
-allow update_engine_common postinstall_mnt_dir:dir mounton;
+allow update_engine_common postinstall_mnt_dir:dir { mounton getattr search };
 allow update_engine_common postinstall_file:filesystem { mount unmount relabelfrom relabelto };
 allow update_engine_common labeledfs:filesystem relabelfrom;