platform_system_sepolicy/apex/com.android.art.debug-file_contexts

#############################
# System files
#
(/.*)?                         u:object_r:system_file:s0
/bin/dex2oat(d)?(32|64)?       u:object_r:dex2oat_exec:s0
/bin/dexoptanalyzer(d)?        u:object_r:dexoptanalyzer_exec:s0
/bin/odrefresh                 u:object_r:odrefresh_exec:s0
/bin/profman(d)?               u:object_r:profman_exec:s0
/lib(64)?(/.*)?                u:object_r:system_lib_file:s0
Move file_contexts for APEXes to under /system/sepolicy For centralized development of sepolices, file_contexts files for APEXes are all moved to under /system/seplicy. Bug: 119034475 Bug: 113373927 Test: m apex.test com.android.tzdata com.android.runtime com.android.media Change-Id: I9bf4874793db4dbdb75cbd759ae95f72d7281007 2018-11-09 22:51:49 +01:00			`#############################`
			`# System files`
			`#`
Sepolicy: Add base runtime APEX postinstall policies Add art_apex_postinstall domain that is allowed to move precreated AoT artifacts from /data/ota. Bug: 125474642 Test: m Change-Id: Id674e202737155a4ee31187f096d1dd655001fdd 2019-02-21 19:03:07 +01:00			`(/.*)? u:object_r:system_file:s0`
Fix sepolicy of ART module. The dex2oat debug binary ends with the bitness. Bug: 160137482 Test: adb shell cmd package bg-dexopt-job Change-Id: If78cd100eb1c0245e425361d56e1936f1c6c98a6 2020-07-06 11:15:39 +02:00			`/bin/dex2oat(d)?(32\|64)? u:object_r:dex2oat_exec:s0`
Sepolicy: Add base runtime APEX postinstall policies Add art_apex_postinstall domain that is allowed to move precreated AoT artifacts from /data/ota. Bug: 125474642 Test: m Change-Id: Id674e202737155a4ee31187f096d1dd655001fdd 2019-02-21 19:03:07 +01:00			`/bin/dexoptanalyzer(d)? u:object_r:dexoptanalyzer_exec:s0`
Permissions for odrefresh and /data/misc/apexdata/com.android.art odrefresh is the process responsible for checking and creating ART compilation artifacts that live in the ART APEX data directory (/data/misc/apexdata/com.android.art). There are two types of change here: 1) enabling odrefresh to run dex2oat and write updated boot class path and system server AOT artifacts into the ART APEX data directory. 2) enabling the zygote and assorted diagnostic tools to use the updated AOT artifacts. odrefresh uses two file contexts: apex_art_data_file and apex_art_staging_data_file. When odrefresh invokes dex2oat, the generated files have the apex_art_staging_data_file label (which allows writing). odrefresh then moves these files from the staging area to their installation area and gives them the apex_art_data_file label. Bug: 160683548 Test: adb root && adb shell /apex/com.android.art/bin/odrefresh Change-Id: I9fa290e0c9c1b7b82be4dacb9f2f8cb8c11e4895 2020-10-16 16:29:55 +02:00			`/bin/odrefresh u:object_r:odrefresh_exec:s0`
Sepolicy: Add base runtime APEX postinstall policies Add art_apex_postinstall domain that is allowed to move precreated AoT artifacts from /data/ota. Bug: 125474642 Test: m Change-Id: Id674e202737155a4ee31187f096d1dd655001fdd 2019-02-21 19:03:07 +01:00			`/bin/profman(d)? u:object_r:profman_exec:s0`
			`/lib(64)?(/.*)? u:object_r:system_lib_file:s0`