Merge "Extend mediaextractor file read permissions" into oc-dev

am: 910e60c7

Change-Id: I10b076757792b33b75dc3a818495037c6ada0b49

public/mediaextractor.te

@@ -23,6 +23,11 @@ crash_dump_fallback(mediaextractor)
 # allow mediaextractor read permissions for file sources
 allow mediaextractor media_rw_data_file:file { getattr read };
 
+# Read resources from open apk files passed over Binder
+allow mediaextractor apk_data_file:file { read getattr };
+allow mediaextractor asec_apk_file:file { read getattr };
+allow mediaextractor ringtone_file:file { read getattr };
+
 ###
 ### neverallow rules
 ###