Merge changes from topic "b/154795779" into rvc-dev am: 5e85b38286

Change-Id: I2eb44f8b85a91ae792e0e0cd7d088ad733306528

prebuilts/api/30.0/private/coredomain.te

@@ -88,7 +88,7 @@ full_treble_only(`
         -webview_zygote
         -zygote
         userdebug_or_eng(`-heapprofd')
-    } vendor_overlay_file:file r_file_perms;
+    } vendor_overlay_file:file open;
 ')
 
 # Core domains are not permitted to use kernel interfaces which are not

prebuilts/api/30.0/public/drmserver.te

@@ -49,6 +49,9 @@ allow drmserver radio_data_file:file { read getattr map };
 allow drmserver oemfs:dir search;
 allow drmserver oemfs:file r_file_perms;
 
+# overlay package access
+allow drmserver vendor_overlay_file:file { read map };
+
 add_service(drmserver, drmserver_service)
 allow drmserver permission_service:service_manager find;
 allow drmserver mediametrics_service:service_manager find;

prebuilts/api/30.0/public/mediaextractor.te

@@ -34,6 +34,9 @@ allow mediaextractor apk_data_file:file { read getattr };
 allow mediaextractor asec_apk_file:file { read getattr };
 allow mediaextractor ringtone_file:file { read getattr };
 
+# overlay package access
+allow mediaextractor vendor_overlay_file:file { read map };
+
 # scan extractor library directory to dynamically load extractors
 allow mediaextractor system_file:dir { read open };
 

prebuilts/api/30.0/public/mediaserver.te

@@ -130,6 +130,9 @@ allow mediaserver system_server:fd use;
 # b/120491318 allow mediaserver to access void:fd
 allow mediaserver vold:fd use;
 
+# overlay package access
+allow mediaserver vendor_overlay_file:file { read getattr map };
+
 hal_client_domain(mediaserver, hal_allocator)
 
 ###