Merge "Reland "[res] Allow accessing idmap files in all zygotes"" into main am: b4d6657a5c

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2970351

Change-Id: I61de789991aeb6254b9d2f80bff9a65f06c4b533
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Treehugger Robot 2024-02-22 09:07:53 +00:00 committed by Automerger Merge Worker
commit 444ca3ef45
2 changed files with 8 additions and 0 deletions

View file

@ -93,6 +93,10 @@ get_prop(app_zygote, device_config_runtime_native_boot_prop)
# Allow app_zygote to access odsign verification status
get_prop(app_zygote, odsign_prop)
# /data/resource-cache
allow app_zygote resourcecache_data_file:file r_file_perms;
allow app_zygote resourcecache_data_file:dir r_dir_perms;
#####
##### Neverallow
#####

View file

@ -93,6 +93,10 @@ get_prop(webview_zygote, device_config_runtime_native_boot_prop)
# Allow webview_zygote to access odsign verification status
get_prop(zygote, odsign_prop)
# /data/resource-cache
allow webview_zygote resourcecache_data_file:file r_file_perms;
allow webview_zygote resourcecache_data_file:dir r_dir_perms;
#####
##### Neverallow
#####