Skip to content
Snippets Groups Projects
Commit c170107a authored by Ian Pedowitz's avatar Ian Pedowitz
Browse files

Fixing build as SEPolicy changed during merge of P-Finalization

Bug: 77589980
Test: diff -r system/sepolicy/public system/sepolicy/prebuilts/api/28.0/public is empty
Change-Id: I5ecb003e893d87e36e096208e505ad1264c288aa
parent 94c1113c
No related branches found
No related tags found
No related merge requests found
...@@ -6,7 +6,9 @@ allow profman user_profile_data_file:file { getattr read write lock }; ...@@ -6,7 +6,9 @@ allow profman user_profile_data_file:file { getattr read write lock };
# Dumping profile info opens the application APK file for pretty printing. # Dumping profile info opens the application APK file for pretty printing.
allow profman asec_apk_file:file { read }; allow profman asec_apk_file:file { read };
allow profman apk_data_file:file { read }; allow profman apk_data_file:file { getattr read };
allow profman apk_data_file:dir { getattr read search };
allow profman oemfs:file { read }; allow profman oemfs:file { read };
# Reading an APK opens a ZipArchive, which unpack to tmpfs. # Reading an APK opens a ZipArchive, which unpack to tmpfs.
allow profman tmpfs:file { read }; allow profman tmpfs:file { read };
...@@ -18,6 +20,7 @@ allow profman installd:fd use; ...@@ -18,6 +20,7 @@ allow profman installd:fd use;
# are application dex files reported back to the framework when using # are application dex files reported back to the framework when using
# BaseDexClassLoader. # BaseDexClassLoader.
allow profman app_data_file:file { getattr read write lock }; allow profman app_data_file:file { getattr read write lock };
allow profman app_data_file:dir { getattr read search };
### ###
### neverallow rules ### neverallow rules
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment