diff options
author | dcashman <dcashman@google.com> | 2014-08-27 10:14:18 -0700 |
---|---|---|
committer | Nick Kralevich <nnk@google.com> | 2014-09-11 20:38:44 +0000 |
commit | 089d5fb7e9087a7ac28ba65f883ad91613adaec3 (patch) | |
tree | 4f8736473a9393ab3858bae74659abbc2685530c /app.te | |
parent | 7f4a8a7291ab17385c86fe768b7e0912068ed7d5 (diff) | |
download | android_external_sepolicy-089d5fb7e9087a7ac28ba65f883ad91613adaec3.tar.gz android_external_sepolicy-089d5fb7e9087a7ac28ba65f883ad91613adaec3.tar.bz2 android_external_sepolicy-089d5fb7e9087a7ac28ba65f883ad91613adaec3.zip |
Allow appdomain read perms on apk_data_files.
Address:
type=1400 audit(0.0:103): avc: denied { read } for name="arm" dev="mmcblk0p28" ino=195471 scontext=u:r:untrusted_app:s0 tcontext=u:object_r:apk_data_file:s0 tclass=dir
(cherrypick of commit 711895db2897bc5d001899eb5e0f931c79a1ad3f)
Bug: 16204150
Change-Id: I8bf0172b26b780c110c0d95c691785143acd7dd2
Diffstat (limited to 'app.te')
-rw-r--r-- | app.te | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -142,6 +142,7 @@ allow appdomain shared_relro_file:dir search; allow appdomain shared_relro_file:file r_file_perms; # Allow apps to read/execute installed binaries +allow appdomain apk_data_file:dir r_dir_perms; allow appdomain apk_data_file:file { rx_file_perms execmod }; # /data/resource-cache |