Allow apexd to realpath(3) on apex_key_files

am: ecc09871ba

Change-Id: I43f3d98669537d24879f3a734e2684968813e148
This commit is contained in:
Jiyong Park 2018-10-18 23:46:29 -07:00 committed by android-build-merger
commit 6d474849e8

View file

@ -3,7 +3,7 @@ typeattribute apexd coredomain;
init_daemon_domain(apexd)
# Read /system/etc/security/apex_debug_key
allow apexd apex_key_file:dir search;
allow apexd apex_key_file:dir { search getattr };
allow apexd apex_key_file:file r_file_perms;
# Allow reading and writing of APEX files in the APEX data dir