Merge "Reland "[res] Allow accessing idmap files in all zygotes"" into main am: b4d6657a5c
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2970351 Change-Id: I61de789991aeb6254b9d2f80bff9a65f06c4b533 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
commit
444ca3ef45
2 changed files with 8 additions and 0 deletions
|
@ -93,6 +93,10 @@ get_prop(app_zygote, device_config_runtime_native_boot_prop)
|
|||
# Allow app_zygote to access odsign verification status
|
||||
get_prop(app_zygote, odsign_prop)
|
||||
|
||||
# /data/resource-cache
|
||||
allow app_zygote resourcecache_data_file:file r_file_perms;
|
||||
allow app_zygote resourcecache_data_file:dir r_dir_perms;
|
||||
|
||||
#####
|
||||
##### Neverallow
|
||||
#####
|
||||
|
|
|
@ -93,6 +93,10 @@ get_prop(webview_zygote, device_config_runtime_native_boot_prop)
|
|||
# Allow webview_zygote to access odsign verification status
|
||||
get_prop(zygote, odsign_prop)
|
||||
|
||||
# /data/resource-cache
|
||||
allow webview_zygote resourcecache_data_file:file r_file_perms;
|
||||
allow webview_zygote resourcecache_data_file:dir r_dir_perms;
|
||||
|
||||
#####
|
||||
##### Neverallow
|
||||
#####
|
||||
|
|
Loading…
Reference in a new issue