diff options
| author | Fyodor Kupolov <fkupolov@google.com> | 2015-04-06 19:26:33 -0700 |
|---|---|---|
| committer | Fyodor Kupolov <fkupolov@google.com> | 2015-04-07 10:50:13 -0700 |
| commit | 3af8c9d0ef0e4385f69a1a50dd04a010a76c6b19 (patch) | |
| tree | e193cf520580de14a919036379a74eccf9bef54e /system_server.te | |
| parent | d4c78f4b3fed1ca77aa9f13e757644aca3ed2b21 (diff) | |
| download | android_external_sepolicy-3af8c9d0ef0e4385f69a1a50dd04a010a76c6b19.tar.gz android_external_sepolicy-3af8c9d0ef0e4385f69a1a50dd04a010a76c6b19.tar.bz2 android_external_sepolicy-3af8c9d0ef0e4385f69a1a50dd04a010a76c6b19.zip | |
Allow system_server to read oat dir
Required for PackageManagerService to perform restorecon recursively on a
staging dir.
Addresses the following denial:
avc: denied { open } for name="oat" dev="mmcblk0p28" ino=163027 scontext=u:r:system_server:s0 tcontext=u:object_r:dalvikcache_data_file:s0 tclass=dir
Bug: 19550105
Bug: 20087446
Change-Id: I0f6ebb79745091ecb4d6d3dbe92f65606b7469da
Diffstat (limited to 'system_server.te')
| -rw-r--r-- | system_server.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/system_server.te b/system_server.te index 38658d4..4480684 100644 --- a/system_server.te +++ b/system_server.te @@ -14,6 +14,7 @@ allow system_server system_server_tmpfs:file execute; # For art. allow system_server dalvikcache_data_file:file execute; +allow system_server dalvikcache_data_file:dir r_dir_perms; # /data/resource-cache allow system_server resourcecache_data_file:file r_file_perms; |