Merge "system_server: grant read access to vendor/framework" am: 5b1c3b69

am: d69acbbf

Change-Id: Id2e01070d5669362b78f4adc865c4ff358711e60

private/bug_map

@@ -7,7 +7,6 @@ priv_app sysfs dir 72749888
 priv_app sysfs_android_usb file 72749888
 priv_app system_data_file dir 72811052
 system_server crash_dump process 73128755
-system_server vendor_framework_file dir 68826235
 untrusted_app_25 system_data_file dir 72550646
 untrusted_app_27 system_data_file dir 72550646
 usbd usbd capability 72472544

private/system_server.te

@@ -335,10 +335,9 @@ allow system_server apk_data_file:{ file lnk_file } { create_file_perms link };
 allow system_server apk_tmp_file:dir create_dir_perms;
 allow system_server apk_tmp_file:file create_file_perms;
 
-# Access /vendor/app
+# Access /vendor/{app,framework,overlay}
 r_dir_file(system_server, vendor_app_file)
-
-# Access /vendor/app
+r_dir_file(system_server, vendor_framework_file)
 r_dir_file(system_server, vendor_overlay_file)
 
 # Manage /data/app-private.