tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix sepolicy for secondary dex files am: de7244cf23

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1360752

Change-Id: I42e7ae0da2d566c983f706194510ec3b543af925
This commit is contained in:
Calin Juravle 2020-07-15 18:42:58 +00:00 committed by Automerger Merge Worker
commit 150e00dd75
4 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
prebuilts/api/30.0/private/coredomain.te
View file

@ -22,6 +22,7 @@ full_treble_only(`
coredomain
-appdomain
-dex2oat
-dexoptanalyzer
-idmap
-init
-installd
@ -38,6 +39,7 @@ full_treble_only(`
coredomain
-appdomain
-dex2oat
-dexoptanalyzer
-idmap
-init
-installd

4
prebuilts/api/30.0/private/dexoptanalyzer.te
View file

@ -3,6 +3,10 @@ type dexoptanalyzer, domain, coredomain, mlstrustedsubject;
type dexoptanalyzer_exec, system_file_type, exec_type, file_type;
type dexoptanalyzer_tmpfs, file_type;
r_dir_file(dexoptanalyzer, apk_data_file)
# Access to /vendor/app
r_dir_file(dexoptanalyzer, vendor_app_file)
# Reading an APK opens a ZipArchive, which unpack to tmpfs.
# Use tmpfs_domain() which will give tmpfs files created by dexoptanalyzer their
# own label, which differs from other labels created by other processes.

2
private/coredomain.te
View file

@ -39,6 +39,7 @@ full_treble_only(`
coredomain
-appdomain
-dex2oat
-dexoptanalyzer
-idmap
-init
-installd
@ -55,6 +56,7 @@ full_treble_only(`
coredomain
-appdomain
-dex2oat
-dexoptanalyzer
-idmap
-init
-installd

4
private/dexoptanalyzer.te
View file

@ -3,6 +3,10 @@ type dexoptanalyzer, domain, coredomain, mlstrustedsubject;
type dexoptanalyzer_exec, system_file_type, exec_type, file_type;
type dexoptanalyzer_tmpfs, file_type;
r_dir_file(dexoptanalyzer, apk_data_file)
# Access to /vendor/app
r_dir_file(dexoptanalyzer, vendor_app_file)
# Reading an APK opens a ZipArchive, which unpack to tmpfs.
# Use tmpfs_domain() which will give tmpfs files created by dexoptanalyzer their
# own label, which differs from other labels created by other processes.