d3438b0f3c
Also allow odrefresh to run pvm_exec to talk to the CompOS VM. And I moved the dontaudit & neverallow rules to the bottom while I was here. Bug: 186126194 Test: adb shell apex/com.android.compos/bin/composd_cmd Change-Id: I6f06dd6467a8eb59123d06c7179a86d9287e7f2f
18 lines
550 B
Text
18 lines
550 B
Text
type composd, domain, coredomain;
|
|
type composd_exec, system_file_type, exec_type, file_type;
|
|
|
|
# Host a dynamic AIDL service
|
|
init_daemon_domain(composd)
|
|
binder_use(composd)
|
|
add_service(composd, compos_service)
|
|
|
|
# Start a VM
|
|
virtualizationservice_use(composd)
|
|
|
|
# Access our APEX data files
|
|
allow composd apex_module_data_file:dir search;
|
|
allow composd apex_compos_data_file:dir create_dir_perms;
|
|
allow composd apex_compos_data_file:file create_file_perms;
|
|
|
|
# Run odrefresh to refresh ART artifacts
|
|
domain_auto_trans(composd, odrefresh_exec, odrefresh)
|