diff options
author | Narayan Kamath <narayan@google.com> | 2015-06-05 12:18:22 +0100 |
---|---|---|
committer | Narayan Kamath <narayan@google.com> | 2015-06-05 13:45:39 +0100 |
commit | 9aafd4a3eb7767adc3989b6e6067d600e0116b0f (patch) | |
tree | 6d05ff49719c1d7ae24709101c02c49d9475d777 | |
parent | 01898ea4aa2dbd676c2c20a796251285a1671a96 (diff) | |
download | android_external_sepolicy-9aafd4a3eb7767adc3989b6e6067d600e0116b0f.tar.gz android_external_sepolicy-9aafd4a3eb7767adc3989b6e6067d600e0116b0f.tar.bz2 android_external_sepolicy-9aafd4a3eb7767adc3989b6e6067d600e0116b0f.zip |
Allow installd to link apk_data_file and dalvikcache_data_file.
Needed for split app installs, where we link existing apks and
compiled output to the stage location.
bug: 20889739
Change-Id: I610dc5b12cb46b03894002d60db7c06412d12cab
-rw-r--r-- | installd.te | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/installd.te b/installd.te index a47853f..18d6c6d 100644 --- a/installd.te +++ b/installd.te @@ -8,11 +8,11 @@ allow installd self:capability { chown dac_override fowner fsetid setgid setuid # Allow labeling of files under /data/app/com.example/oat/ allow installd dalvikcache_data_file:dir relabelto; -allow installd dalvikcache_data_file:file relabelto; +allow installd dalvikcache_data_file:file { relabelto link }; # Allow movement of APK files between volumes allow installd apk_data_file:dir { create_dir_perms relabelfrom }; -allow installd apk_data_file:file { create_file_perms relabelfrom }; +allow installd apk_data_file:file { create_file_perms relabelfrom link }; allow installd apk_data_file:lnk_file { create read unlink }; allow installd asec_apk_file:file r_file_perms; |