f97cc1fd26
Bug: 205750213
Test: /apex/com.android.compos/bin/composd_cmd forced-odrefresh
# With SELinux enforced in the VM, plus some hacks in ART,
# observed odrefresh exited 80.
Change-Id: I81ab0a73314fdcea69c69350c792ff7acab5aab8
23 lines
823 B
Text
23 lines
823 B
Text
# odrefresh
|
|
type odrefresh, domain, coredomain;
|
|
type odrefresh_exec, system_file_type, exec_type, file_type;
|
|
|
|
# Run dex2oat in its own sandbox.
|
|
domain_auto_trans(odrefresh, dex2oat_exec, dex2oat)
|
|
|
|
# Allow odrefresh to kill dex2oat if compilation times out.
|
|
allow odrefresh dex2oat:process sigkill;
|
|
|
|
# Allow odrefresh to read/write/lookup files/directories on authfs.
|
|
allow odrefresh authfs_fuse:file create_file_perms;
|
|
allow odrefresh authfs_fuse:dir create_dir_perms;
|
|
|
|
# Allow odrefresh to check the parent directory exists.
|
|
allow odrefresh authfs_data_file:dir { search getattr };
|
|
|
|
# Allow odrefresh to read /apex/apex-info-list.xml to gather information of
|
|
# the current APEXes.
|
|
allow odrefresh apex_info_file:file r_file_perms;
|
|
|
|
# Do not audit unused resources from parent processes.
|
|
dontaudit odrefresh compos:fd use;
|