tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow installd to read vendor_overlay_file" into oc-dev

Browse source 
am: 9829506c25

Change-Id: I7a05cbb58ebbe4d23c9fc13ef429b444301a912e
This commit is contained in:
Jaekyun Seok 2017-04-26 22:04:31 +00:00 committed by android-build-merger
commit 59be4ad535
2 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
public/domain.te
View file

@ -695,6 +695,7 @@ full_treble_only(`
-appdomain
-idmap
-init
-installd
-system_server
-zygote
} vendor_overlay_file:dir { getattr open read search };
@ -704,6 +705,7 @@ full_treble_only(`
-appdomain
-idmap
-init
-installd
-system_server
-zygote
} vendor_overlay_file:{ file lnk_file } r_file_perms;

2
public/installd.te
View file

@ -29,6 +29,8 @@ r_dir_file(installd, rootfs)
r_dir_file(installd, system_file)
# Scan through APKs in /vendor/app
r_dir_file(installd, vendor_app_file)
# Scan through Runtime Resource Overlay APKs in /vendor/overlay
r_dir_file(installd, vendor_overlay_file)
# Get file context
allow installd file_contexts_file:file r_file_perms;
# Get seapp_context