platform_system_sepolicy/prebuilts/api
Sanjana Sunil 563016314c Allow zygote to relabel sdk_sandbox_system_data_file
To perform sdk sandbox data isolation, the zygote gets the selinux label
of SDK sandbox storage (e.g. /data/misc_{ce,de}/<user-id>/sdksandbox)
before tmpfs is mounted onto /data/misc_{ce,de} (or other volumes). It
relabels it back once bind mounting of required sandbox data is done.
This change allows for the zygote to perform these operations.

Bug: 214241165
Test: atest SdkSandboxStorageHostTest
Change-Id: I28d1709ab4601f0fb1788435453ed19d023dc80b
2022-05-20 11:24:32 +00:00
..
28.0 Remove compat test from treble sepolicy tests 2022-02-16 04:09:29 +00:00
29.0 Merge "Remove compat test from treble sepolicy tests" am: 8e6b55a13d 2022-02-17 01:46:44 +00:00
30.0 Set expandattribute false for property attributes in prebuilts am: fa3b250ad1 am: ae167c2105 am: 7c80be1c0e 2022-05-16 23:03:24 +00:00
31.0 Merge "Grant permission for mediatranscoding hal_allocator for OMX platforms" into android12-tests-dev am: d4a7420e0c am: 8183cf27b5 2022-05-16 23:19:53 +00:00
32.0 Allow MediaProvider to access the media metrics service 2022-03-02 18:17:57 -08:00
33.0 Allow zygote to relabel sdk_sandbox_system_data_file 2022-05-20 11:24:32 +00:00