aboutsummaryrefslogtreecommitdiffstats
path: root/app.te
diff options
context:
space:
mode:
authordcashman <dcashman@google.com>2014-08-27 10:14:18 -0700
committerNick Kralevich <nnk@google.com>2014-09-11 20:38:44 +0000
commit089d5fb7e9087a7ac28ba65f883ad91613adaec3 (patch)
tree4f8736473a9393ab3858bae74659abbc2685530c /app.te
parent7f4a8a7291ab17385c86fe768b7e0912068ed7d5 (diff)
downloadandroid_external_sepolicy-089d5fb7e9087a7ac28ba65f883ad91613adaec3.tar.gz
android_external_sepolicy-089d5fb7e9087a7ac28ba65f883ad91613adaec3.tar.bz2
android_external_sepolicy-089d5fb7e9087a7ac28ba65f883ad91613adaec3.zip
Allow appdomain read perms on apk_data_files.
Address: type=1400 audit(0.0:103): avc: denied { read } for name="arm" dev="mmcblk0p28" ino=195471 scontext=u:r:untrusted_app:s0 tcontext=u:object_r:apk_data_file:s0 tclass=dir (cherrypick of commit 711895db2897bc5d001899eb5e0f931c79a1ad3f) Bug: 16204150 Change-Id: I8bf0172b26b780c110c0d95c691785143acd7dd2
Diffstat (limited to 'app.te')
-rw-r--r--app.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/app.te b/app.te
index 538c1c4..e7a40d2 100644
--- a/app.te
+++ b/app.te
@@ -142,6 +142,7 @@ allow appdomain shared_relro_file:dir search;
allow appdomain shared_relro_file:file r_file_perms;
# Allow apps to read/execute installed binaries
+allow appdomain apk_data_file:dir r_dir_perms;
allow appdomain apk_data_file:file { rx_file_perms execmod };
# /data/resource-cache