tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow authfs to read extra APK mount"

Browse source
This commit is contained in:
Treehugger Robot 2022-01-13 01:06:01 +00:00 committed by Gerrit Code Review
commit 70cd2da646
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
microdroid/system/private/authfs.te
View file

@ -17,5 +17,9 @@ allow authfs fuse:filesystem relabelfrom;
allow authfs authfs_fuse:filesystem { mount relabelfrom relabelto }; allow authfs authfs_fuse:filesystem { mount relabelfrom relabelto };
allow authfs authfs_data_file:dir { mounton search }; allow authfs authfs_data_file:dir { mounton search };
# Allow authfs to access extra APK mount.
allow authfs extra_apk_file:file r_file_perms;
allow authfs extra_apk_file:dir search;
# TODO(195568812): Don't pass FD 0,1,2 unnecessarily. # TODO(195568812): Don't pass FD 0,1,2 unnecessarily.
allow authfs authfs_service:fd use; allow authfs authfs_service:fd use;