From d33568264f0843feafc2d17c38e863f914f1fc57 Mon Sep 17 00:00:00 2001
From: Jeff Sharkey <jsharkey@android.com>
Date: Wed, 9 Jul 2014 14:58:46 -0700
Subject: [PATCH] Let DCS read staged APK clusters.

DCS is DefaultContainerService.

avc: denied { getattr } for path="/data/app/vmdl2.tmp"
    dev="mmcblk0p28" ino=162910 scontext=u:r:platform_app:s0
    tcontext=u:object_r:apk_tmp_file:s0 tclass=dir

Bug: 14975160
Change-Id: Ifca9afb4e74ebbfbeb8c01e1e9ea65f5b55e9375
---
 platform_app.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/platform_app.te b/platform_app.te
index 01517204a..7ff8d62e2 100644
--- a/platform_app.te
+++ b/platform_app.te
@@ -13,6 +13,7 @@ allow platform_app shell_data_file:dir search;
 allow platform_app shell_data_file:file { open getattr read };
 # Populate /data/app/vmdl*.tmp, /data/app-private/vmdl*.tmp files
 # created by system server.
+allow platform_app { apk_tmp_file apk_private_tmp_file }:dir rw_dir_perms;
 allow platform_app { apk_tmp_file apk_private_tmp_file }:file rw_file_perms;
 allow platform_app apk_private_data_file:dir search;
 # ASEC