Merge "sepolicy: allow apps to execute libs embedded inside vendor apk" into oc-dev am: a82c3d57

am: 524b0650 Change-Id: I893d97b9a6383ef1914bfbda43606dfaad6554e4

Merge "sepolicy: allow apps to execute libs embedded inside vendor apk" into oc-dev am: a82c3d57
003a9b54 · Jiyong Park · android-build-merger · 093bcd99 · 524b0650 · 003a9b54
Commit 003a9b54 authored May 17, 2017 by Jiyong Park Committed by android-build-merger May 17, 2017
--- a/private/app.te
+++ b/private/app.te
@@ -114,6 +114,7 @@ full_treble_only(`
 # Allow apps access to /vendor/app except for privileged
 # apps which cannot be in /vendor.
 r_dir_file({ appdomain -ephemeral_app -untrusted_v2_app }, vendor_app_file)
+allow { appdomain -ephemeral_app -untrusted_v2_app } vendor_app_file:file execute;

 # Allow apps access to /vendor/overlay
 r_dir_file(appdomain, vendor_overlay_file)