Igor Murashkin
f7ccfd003c
zygote/dex2oat: Grant additional symlink permissions
...
* zygote needs to be able to symlink from dalvik cache to system
to avoid having to copy boot.oat
(when the boot.oat file was built with --compile-pic)
* dex2oat needs to be able to read the symlink in the dalvik cache
(the one that zygote creates)
(cherry-picked from AOSP master
83c5612e69
2014-10-31 10:21:48 -07:00
Nick Kralevich
e4aa75db61
dex2oat: fix forward-locked upgrades with unlabeled asecs
...
dex2oat fails when upgrading unlabeled asec containers.
Steps to reproduce:
1) Install a forward locked app on Android 4.1
adb install -l foo.apk
2) Upgrade to tip-of-tree
Addresses the following denial:
<4>[ 379.886665] type=1400 audit(1405549869.210:4): avc: denied { read } for pid=2389 comm="dex2oat" path="/mnt/asec/jackpal.androidterm-1/pkg.apk" dev=dm-0 ino=12 scontext=u:r:dex2oat:s0 tcontext=u:object_r:unlabeled:s0 tclass=file
(cherry picked from commit 270be6e86a
2014-07-16 16:04:40 -07:00
Nick Kralevich
94b2ba9463
dex2oat: fix forward locked apps
...
dex2oat can't access file descriptors associated with asec_apk_files.
This breaks installing forward locked apps, and generates the following
denial:
type=1400 audit(0.0:18): avc: denied { read } for path="/mnt/asec/com.example.android.simplejni-1/pkg.apk" dev="dm-0" ino=12 scontext=u:r:dex2oat:s0 tcontext=u:object_r:asec_apk_file:s0 tclass=file
Steps to reproduce:
$ adb install -r -l SimpleJNI.apk
Expected:
app installs
Actual:
app fails to install.
Bug: 16328233
(cherry picked from commit 5259c5e616
2014-07-16 09:53:40 -07:00
Ed Heyl
8ee37b4f1c
reconcile aosp ( c103da877b) after branching. Please do not merge.
...
Change-Id: Ic9dde806a30d3e7b9c4a066f247a9207fe9b94b4
2014-07-14 23:32:08 -07:00
