Skip to content
Snippets Groups Projects
  • Igor Murashkin's avatar
    zygote/dex2oat: Grant additional symlink permissions · 83c5612e
    Igor Murashkin authored
    * zygote needs to be able to symlink from dalvik cache to system
      to avoid having to copy boot.oat
      (when the boot.oat file was built with --compile-pic)
    * dex2oat needs to be able to read the symlink in the dalvik cache
      (the one that zygote creates)
    
    Bug: 18035729
    Change-Id: Ie1acad81a0fd8b2f24e1f3f07a06e6fdb548be62
    83c5612e
dex2oat.te 472 B
# dex2oat
type dex2oat, domain;
type dex2oat_exec, exec_type, file_type;

allow dex2oat dalvikcache_data_file:file write;
# Read symlinks in /data/dalvik-cache
allow dex2oat dalvikcache_data_file:lnk_file read;
allow dex2oat installd:fd use;

# Read already open asec_apk_file file descriptors passed by installd.
# Also allow reading unlabeled files, to allow for upgrading forward
# locked APKs.
allow dex2oat asec_apk_file:file read;
allow dex2oat unlabeled:file read;