Allow search permission on apex data directories.

This gives x permission to all on the parent apex data directory
so that the data directories can be accessed by modules.

Bug: 147848983
Test: Build & flash, check permissions are correct
Change-Id: I1bbf480cbf9f9e758353237e333317516ad375ee
This commit is contained in:
Oli Lan 2020-01-17 11:01:38 +00:00
parent 9cfc404c2d
commit e1b3f5cd2d

View file

@ -121,7 +121,7 @@ static bool rmrf_contents(const std::string& path) {
} }
static bool prepare_apex_subdirs(struct selabel_handle* sehandle, const std::string& path) { static bool prepare_apex_subdirs(struct selabel_handle* sehandle, const std::string& path) {
if (!prepare_dir(sehandle, 0700, 0, 0, path + "/apexdata")) return false; if (!prepare_dir(sehandle, 0711, 0, 0, path + "/apexdata")) return false;
auto dirp = std::unique_ptr<DIR, int (*)(DIR*)>(opendir("/apex"), closedir); auto dirp = std::unique_ptr<DIR, int (*)(DIR*)>(opendir("/apex"), closedir);
if (!dirp) { if (!dirp) {
@ -138,7 +138,7 @@ static bool prepare_apex_subdirs(struct selabel_handle* sehandle, const std::str
if (strchr(name, '@') != NULL) continue; if (strchr(name, '@') != NULL) continue;
if (!prepare_dir(sehandle, 0770, AID_ROOT, AID_SYSTEM, path + "/apexdata/" + name)) { if (!prepare_dir(sehandle, 0771, AID_ROOT, AID_SYSTEM, path + "/apexdata/" + name)) {
return false; return false;
} }
} }