Merge "Allow dex2oat to acess profile files"

d8c9c6d4 · Calin Juravle · Android (Google) Code Review · 44df6a7e · de41b3d9 · d8c9c6d4
Commit d8c9c6d4 authored 9 years ago by Calin Juravle Committed by Android (Google) Code Review 9 years ago
--- a/dex2oat.te
+++ b/dex2oat.te
 # dex2oat
-type dex2oat, domain, domain_deprecated;
+type dex2oat, domain, mlstrustedsubject, domain_deprecated;
 type dex2oat_exec, exec_type, file_type;

 allow dex2oat dalvikcache_data_file:file write;
@@ -14,3 +14,6 @@ allow dex2oat asec_apk_file:file read;
 allow dex2oat unlabeled:file read;
 allow dex2oat oemfs:file read;
 allow dex2oat apk_tmp_file:file read;
+allow dex2oat app_data_file:file {read write lock};
+
+neverallow dex2oat app_data_file:notdevfile_class_set open;