0547fb5ab2
Remove mention of the /system/bin/idmap binary: the file no longer exists. Remove interaction between the domains installd and idmap to interact: installd used to fork and exec the idmap binary, but the idmap2 binary has its own binder service. Bug: 118711077 Bug: 119264713 Test: atest FrameworksServicesTests:com.android.server.om OverlayDeviceTests OverlayHostTests CtsAppSecurityHostTestCases:OverlayHostTest Change-Id: I06d22057308984e43cb84ff365dbdd1864c7064b
26 lines
930 B
Text
26 lines
930 B
Text
# idmap, when executed by installd
|
|
type idmap, domain;
|
|
type idmap_exec, system_file_type, exec_type, file_type;
|
|
|
|
# Allow read + write access to /data/resource-cache
|
|
allow idmap resourcecache_data_file:file create_file_perms;
|
|
allow idmap resourcecache_data_file:dir rw_dir_perms;
|
|
|
|
# Open and read from target and overlay apk files passed by argument.
|
|
allow idmap apk_data_file:file r_file_perms;
|
|
allow idmap apk_data_file:dir search;
|
|
|
|
# Allow /data/app/vmdl*.tmp, /data/app-private/vmdl*.tmp files
|
|
allow idmap { apk_tmp_file apk_private_tmp_file }:file r_file_perms;
|
|
allow idmap { apk_tmp_file apk_private_tmp_file }:dir search;
|
|
|
|
# Allow apps access to /vendor/app
|
|
r_dir_file(idmap, vendor_app_file)
|
|
|
|
# Allow apps access to /vendor/overlay
|
|
r_dir_file(idmap, vendor_overlay_file)
|
|
|
|
# Allow the idmap2d binary to register as a service and communicate via AIDL
|
|
binder_use(idmap)
|
|
binder_service(idmap)
|
|
add_service(idmap, idmap_service)
|