dontaudit dexoptanalyzer's DM file check on secondary dex files.

Bug: 259758044
Change-Id: I5cf88e2f2217c03cff071f17aadd71153f170c61
Test: Presubmit
This commit is contained in:
Jiakai Zhang 2023-01-30 07:56:01 +00:00
parent 44785c2623
commit dbfa7d58b7

View file

@ -45,6 +45,10 @@ allow dexoptanalyzer system_file:file lock;
# package manager.
allow dexoptanalyzer { privapp_data_file app_data_file }:file { getattr read map };
# dexoptanalyzer checks the DM files next to dex files. We don't need this check
# for secondary dex files, but it's not harmful. Just deny it and ignore it.
dontaudit dexoptanalyzer { privapp_data_file app_data_file }:dir search;
# Allow testing /data/user/0 which symlinks to /data/data
allow dexoptanalyzer system_data_file:lnk_file { getattr };