diff --git a/private/apexd.te b/private/apexd.te index b6fff923f..b05fecb78 100644 --- a/private/apexd.te +++ b/private/apexd.te @@ -83,6 +83,9 @@ allow apexd apex_mnt_dir:lnk_file create_file_perms; # allow apexd to create /apex/apex-info-list.xml and relabel to apex_info_file allow apexd apex_mnt_dir:file { create_file_perms relabelfrom mounton }; allow apexd apex_info_file:file relabelto; +# apexd needs to update /apex/apex-info-list.xml after non-staged APEX update. +allow apexd apex_info_file:file rw_file_perms; + # allow apexd to unlink apex files in /data/apex/active # note that apexd won't be able to unlink files in /data/app-staging/session_XXXX, # because it doesn't have write permission for staging_data_file object.