From c29028f4c312f007d9a6b132c2a0747220b37815 Mon Sep 17 00:00:00 2001
From: Jiyong Park <jiyong@google.com>
Date: Mon, 2 Apr 2018 10:42:25 +0900
Subject: [PATCH] Reland "Allow dexopt to follow /odm/lib(64) symlinks.""
This reverts commit 942500b910bedc9c778b330333bb7cc87d717da9.
Bug: 75287236
Test: boot a device
Merged-In: If81a2d2a46979ffbd536bb95528c3b4ebe3483df
Change-Id: If81a2d2a46979ffbd536bb95528c3b4ebe3483df
(cherry picked from commit a6d9d6b68af95bc3a1ef52e54b35e28869592129)
---
public/dex2oat.te | 2 +-
public/postinstall_dexopt.te | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/public/dex2oat.te b/public/dex2oat.te
index 47f3bcb60..608ba7987 100644
--- a/public/dex2oat.te
+++ b/public/dex2oat.te
@@ -44,7 +44,7 @@ allow dex2oat postinstall_dexopt:fd use;
allow dex2oat postinstall_file:dir { getattr search };
allow dex2oat postinstall_file:filesystem getattr;
-allow dex2oat postinstall_file:lnk_file read;
+allow dex2oat postinstall_file:lnk_file { getattr read };
# Allow dex2oat access to files in /data/ota.
allow dex2oat ota_data_file:dir ra_dir_perms;
diff --git a/public/postinstall_dexopt.te b/public/postinstall_dexopt.te
index 8881f4414..82215300a 100644
--- a/public/postinstall_dexopt.te
+++ b/public/postinstall_dexopt.te
@@ -9,7 +9,7 @@ allow postinstall_dexopt self:global_capability_class_set { chown dac_override f
allow postinstall_dexopt postinstall_file:filesystem getattr;
allow postinstall_dexopt postinstall_file:dir { getattr search };
-allow postinstall_dexopt postinstall_file:lnk_file read;
+allow postinstall_dexopt postinstall_file:lnk_file { getattr read };
allow postinstall_dexopt proc_filesystems:file { getattr open read };
allow postinstall_dexopt tmpfs:file read;
--
GitLab