aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNarayan Kamath <narayan@google.com>2015-06-05 12:18:22 +0100
committerNarayan Kamath <narayan@google.com>2015-06-05 13:45:39 +0100
commit9aafd4a3eb7767adc3989b6e6067d600e0116b0f (patch)
tree6d05ff49719c1d7ae24709101c02c49d9475d777
parent01898ea4aa2dbd676c2c20a796251285a1671a96 (diff)
downloadandroid_external_sepolicy-9aafd4a3eb7767adc3989b6e6067d600e0116b0f.tar.gz
android_external_sepolicy-9aafd4a3eb7767adc3989b6e6067d600e0116b0f.tar.bz2
android_external_sepolicy-9aafd4a3eb7767adc3989b6e6067d600e0116b0f.zip
Allow installd to link apk_data_file and dalvikcache_data_file.
Needed for split app installs, where we link existing apks and compiled output to the stage location. bug: 20889739 Change-Id: I610dc5b12cb46b03894002d60db7c06412d12cab
-rw-r--r--installd.te4
1 files changed, 2 insertions, 2 deletions
diff --git a/installd.te b/installd.te
index a47853f..18d6c6d 100644
--- a/installd.te
+++ b/installd.te
@@ -8,11 +8,11 @@ allow installd self:capability { chown dac_override fowner fsetid setgid setuid
# Allow labeling of files under /data/app/com.example/oat/
allow installd dalvikcache_data_file:dir relabelto;
-allow installd dalvikcache_data_file:file relabelto;
+allow installd dalvikcache_data_file:file { relabelto link };
# Allow movement of APK files between volumes
allow installd apk_data_file:dir { create_dir_perms relabelfrom };
-allow installd apk_data_file:file { create_file_perms relabelfrom };
+allow installd apk_data_file:file { create_file_perms relabelfrom link };
allow installd apk_data_file:lnk_file { create read unlink };
allow installd asec_apk_file:file r_file_perms;