tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow shell to read updated APEXes am: 5490752cfc am: 4c79e09417

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1998997

Change-Id: Ic33970b0feecbedca22299078c3c1b1166a54803
This commit is contained in:
Alan Stokes 2022-02-25 15:29:47 +00:00 committed by Automerger Merge Worker
commit 43d0092a86
2 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/domain.te
View file

@ -245,6 +245,7 @@ neverallow {
-installd
-iorap_inode2filename
-priv_app
-shell
-virtualizationservice
-crosvm
} staging_data_file:file *;

4
private/shell.te
View file

@ -130,6 +130,10 @@ allow shell apex_info_file:file r_file_perms;
allow shell vendor_apex_file:file r_file_perms;
allow shell vendor_apex_file:dir r_dir_perms;
# Allow shell to read updated APEXes under /data/apex
allow shell apex_data_file:dir search;
allow shell staging_data_file:file r_file_perms;
# Set properties.
set_prop(shell, shell_prop)
set_prop(shell, ctl_bugreport_prop)