allow system_server getattr on /data/dalvik-cache/profiles

8670305177 wasn't complete. I thought
getattr on the directory wasn't needed but I was wrong. Not sure
how I missed this.

Addresses the following denial:

  <4>[   40.699344] type=1400 audit(15795140.469:9): avc: denied { getattr } for pid=1087 comm="system_server" path="/data/dalvik-cache/profiles" dev="mmcblk0p28" ino=105874 scontext=u:r:system_server:s0 tcontext=u:object_r:dalvikcache_profiles_data_file:s0 tclass=dir

Change-Id: Ibc176b2b00083bafaa91ab78d0f8dc1ca3c208b6
This commit is contained in:
Nick Kralevich 2014-06-13 09:05:26 -07:00
parent 848109c0b9
commit 96d9af4235

View file

@ -196,7 +196,7 @@ allow system_server dalvikcache_data_file:dir create_dir_perms;
allow system_server dalvikcache_data_file:file create_file_perms; allow system_server dalvikcache_data_file:file create_file_perms;
# Read from /data/dalvik-cache/profiles # Read from /data/dalvik-cache/profiles
allow system_server dalvikcache_profiles_data_file:dir w_dir_perms; allow system_server dalvikcache_profiles_data_file:dir { getattr w_dir_perms };
allow system_server dalvikcache_profiles_data_file:file create_file_perms; allow system_server dalvikcache_profiles_data_file:file create_file_perms;
# Manage /data/misc/adb. # Manage /data/misc/adb.