Merge "Allow otapreopt_chroot to use stdin and stdout pipes." into main am: 5896f3e58a

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2681276

Change-Id: I6ff2f1183255703f90203d9ade5ac02afd3ab478
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Martin Stjernholm 2023-08-08 13:51:16 +00:00 committed by Automerger Merge Worker
commit 42b19d7a23

View file

@ -36,9 +36,10 @@ allow otapreopt_chroot postinstall_file:dir r_dir_perms;
# Allow otapreopt_chroot to read the persist.apexd.verity_on_system system property.
get_prop(otapreopt_chroot, apexd_prop)
# Allow otapreopt to use file descriptors from update-engine. It will
# close them immediately.
# Allow otapreopt to use file descriptors from update-engine and the postinstall
# script. It will read dexopt commands from stdin and write progress to stdout.
allow otapreopt_chroot postinstall:fd use;
allow otapreopt_chroot postinstall:fifo_file { read write getattr };
allow otapreopt_chroot update_engine:fd use;
allow otapreopt_chroot update_engine:fifo_file write;