tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow webview_zygote to "search" vendor apex dirs

Browse source 
Now, root dir and apex_manifest.pb of vendor apex mounts are labelled as
vendor_apex_metadata_file. For webview_zygote to read overlays from
vendor apexes it needs to be allowed to "search" the roots of vendor
apexes.

Bug: 286330836
Test: atest CtsWebkitTestCases:android.webkit.cts.WebViewTest#testAddJavascriptInterface
Change-Id: I5ea333800221e272a4e678b00326a79a6398c861
This commit is contained in:
Jooyung Han 2023-06-08 13:17:08 +09:00
parent 49b818497f
commit f91152af55
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/webview_zygote.te
View file

@ -35,6 +35,9 @@ allow webview_zygote dalvikcache_data_file:lnk_file r_file_perms;
allow webview_zygote { apex_art_data_file dalvikcache_data_file }:file { r_file_perms execute };
allow webview_zygote apex_module_data_file:dir search;
# To load overlay from /apex (vendor APEXes)
allow webview_zygote vendor_apex_metadata_file:dir search;
# Allow webview_zygote to create JIT memory.
allow webview_zygote self:process execmem;