Merge "sepolicy: allow system apps to access ASEC"

This commit is contained in:
Nick Kralevich 2014-12-12 16:48:28 +00:00 committed by Gerrit Code Review
commit b7d0ae3aca
2 changed files with 3 additions and 1 deletions

View file

@ -45,6 +45,9 @@ allow system_app logd_prop:property_service set;
allow system_app anr_data_file:dir ra_dir_perms;
allow system_app anr_data_file:file create_file_perms;
# Settings need to access app name and icon from asec
allow system_app asec_apk_file:file r_file_perms;
allow system_app system_app_service:service_manager add;
allow system_app keystore:keystore_key {

View file

@ -32,7 +32,6 @@ allow untrusted_app app_data_file:file { rx_file_perms execmod };
allow untrusted_app tun_device:chr_file rw_file_perms;
# ASEC
allow untrusted_app asec_apk_file:dir { getattr };
allow untrusted_app asec_apk_file:file r_file_perms;
# Execute libs in asec containers.
allow untrusted_app asec_public_file:file { execute execmod };