Merge "Allow system_server_startup to load system server odex files" into sc-dev am: ae1b59975a
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/15108690 Change-Id: I38627ced50e40958caa3decba8068cb9a9de76fb
This commit is contained in:
commit
702ff51093
1 changed files with 4 additions and 0 deletions
|
@ -7,6 +7,10 @@ tmpfs_domain(system_server_startup)
|
|||
allow system_server_startup self:process execmem;
|
||||
allow system_server_startup system_server_startup_tmpfs:file { execute read write open map };
|
||||
|
||||
# Allow to pick up integrity-checked artifacts from the ART APEX dalvik cache.
|
||||
allow system_server_startup apex_art_data_file:dir r_dir_perms;
|
||||
allow system_server_startup apex_art_data_file:file { r_file_perms execute };
|
||||
|
||||
# Allow system_server_startup to run setcon() and enter the
|
||||
# system_server domain
|
||||
allow system_server_startup self:process setcurrent;
|
||||
|
|
Loading…
Reference in a new issue