Merge "runas: Grant access to seapp_contexts_file" into oc-dev

am: f4739f40 Change-Id: Ie07e3ababe6836f6b5c2522c3a3255367d01b662

Merge "runas: Grant access to seapp_contexts_file" into oc-dev
e777112e · Jeff Vander Stoep · android-build-merger · ff61a10c · f4739f40 · e777112e
Commit e777112e authored 8 years ago by Jeff Vander Stoep Committed by android-build-merger 8 years ago
--- a/public/runas.te
+++ b/public/runas.te
@@ -23,6 +23,10 @@ selinux_check_context(runas) # validate context
 allow runas self:process setcurrent;
 allow runas non_system_app_set:process dyntransition; # setcon

+# runas/libselinux needs access to seapp_contexts_file to
+# determine which domain to transition to.
+allow runas seapp_contexts_file:file r_file_perms;
+
 ###
 ### neverallow rules
 ###