Merge "postinstall_dexopt: allow reading odsign.verification.status" am: ae132647b1

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1771328

Change-Id: I8a6e7baadacf51675279e3e1c41a50c0250243c4
This commit is contained in:
Orion Hodson 2021-07-20 11:12:37 +00:00 committed by Automerger Merge Worker
commit 14b66293ba
2 changed files with 6 additions and 0 deletions

View file

@ -32,6 +32,9 @@ allow postinstall_dexopt rootfs:file r_file_perms;
allow postinstall_dexopt tmpfs:file read; allow postinstall_dexopt tmpfs:file read;
# Allow access odsign verification status
get_prop(postinstall_dexopt, odsign_prop)
# Allow access to /postinstall/apex. # Allow access to /postinstall/apex.
allow postinstall_dexopt postinstall_apex_mnt_dir:dir { getattr search }; allow postinstall_dexopt postinstall_apex_mnt_dir:dir { getattr search };

View file

@ -32,6 +32,9 @@ allow postinstall_dexopt rootfs:file r_file_perms;
allow postinstall_dexopt tmpfs:file read; allow postinstall_dexopt tmpfs:file read;
# Allow access odsign verification status
get_prop(postinstall_dexopt, odsign_prop)
# Allow access to /postinstall/apex. # Allow access to /postinstall/apex.
allow postinstall_dexopt postinstall_apex_mnt_dir:dir { getattr search }; allow postinstall_dexopt postinstall_apex_mnt_dir:dir { getattr search };