From e2f4140ceff2b417ac85fb09e452a9f7dbb8cf5a Mon Sep 17 00:00:00 2001 From: Marco Nelissen <marcone@google.com> Date: Mon, 2 Oct 2017 13:00:52 -0700 Subject: [PATCH] Allow scanning extractor library directory so we can dlopen the libraries that are there Test: build&run Merged-Id: Ia1fa1fd65295cffe6c8a3d31db53bd3339a71855 Change-Id: Ia1fa1fd65295cffe6c8a3d31db53bd3339a71855 --- public/mediaextractor.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/public/mediaextractor.te b/public/mediaextractor.te index f8e8a6b39..8ba89138d 100644 --- a/public/mediaextractor.te +++ b/public/mediaextractor.te @@ -34,6 +34,9 @@ allow mediaextractor apk_data_file:file { read getattr }; allow mediaextractor asec_apk_file:file { read getattr }; allow mediaextractor ringtone_file:file { read getattr }; +# scan extractor library directory to dynamically load extractors +allow mediaextractor system_file:dir { read open }; + ### ### neverallow rules ### -- GitLab