Merge "Allow NN HAL service to read files from apk data files" am: c5bae6f802

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1679971

Change-Id: I074eb4d1252917bf0681fc91da22f21c7ee87bb0
This commit is contained in:
Xusong Wang 2021-04-28 15:43:24 +00:00 committed by Automerger Merge Worker
commit 7dfd4783bc

View file

@ -21,6 +21,9 @@ allow hal_neuralnetworks_server ion_device:chr_file r_file_perms;
# Allow NN HAL service to use a client-provided fd residing in /storage
allow hal_neuralnetworks_server storage_file:file { getattr map read };
# Allow NN HAL service to read a client-provided fd residing in /data/app/.
allow hal_neuralnetworks_server apk_data_file:file { getattr map read };
# Allow NN HAL client to check the ro.nnapi.extensions.deny_on_product
# property to determine whether to deny NNAPI extensions use for apps
# on product partition (apps in GSI are not allowed to use NNAPI extensions).