c871c1cc75
- Adapt installd rules for app compilation.
- Add profman rules for checking the profile before compilation. This is new behavior compared to installd.
Bug: 229268202
Test: -
1. adb shell pm art optimize-package -m speed-profile -f \
com.google.android.youtube
2. See no SELinux denial.
Change-Id: Idfe1ccdb1b27fd275fdf912bc8d005551f89d4fc
12 lines
405 B
Text
12 lines
405 B
Text
typeattribute profman coredomain;
|
|
|
|
# Allow profman to read APKs and profile files next to them by FDs passed from
|
|
# other programs. In addition, allow profman to acquire flocks on those files.
|
|
allow profman {
|
|
system_file
|
|
apk_data_file
|
|
vendor_app_file
|
|
}:file { getattr read map lock };
|
|
|
|
# Allow profman to use file descriptors passed from privileged programs.
|
|
allow profman { artd installd }:fd use;
|