From bb8a352fa70a5f47923154efc0ad26198030c00a Mon Sep 17 00:00:00 2001
From: David Sehr <sehr@google.com>
Date: Thu, 2 Jun 2016 10:47:02 -0700
Subject: [PATCH] Enable profman pretty printing
Bug: 28748264
Change-Id: I848c448e43d48d245d998ff22547bc67a640ab96
---
profman.te | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/profman.te b/profman.te
index 989706962..fa3df94a6 100644
--- a/profman.te
+++ b/profman.te
@@ -4,6 +4,12 @@ type profman_exec, exec_type, file_type;
allow profman user_profile_data_file:file { getattr read write lock };
+# Dumping profile info opens the application APK file for pretty printing.
+allow profman asec_apk_file:file { read };
+allow profman apk_data_file:file { read };
+allow profman oemfs:file { read };
+# Reading an APK opens a ZipArchive, which unpack to tmpfs.
+allow profman tmpfs:file { read };
allow profman profman_dump_data_file:file { write };
allow profman installd:fd use;
--
GitLab