Skip to content
Snippets Groups Projects
Commit 089d5fb7 authored by dcashman's avatar dcashman Committed by Nick Kralevich
Browse files

Allow appdomain read perms on apk_data_files.

Address:
type=1400 audit(0.0:103): avc: denied { read } for name="arm" dev="mmcblk0p28" ino=195471 scontext=u:r:untrusted_app:s0 tcontext=u:object_r:apk_data_file:s0 tclass=dir

(cherrypick of commit 711895db)

Bug: 16204150
Change-Id: I8bf0172b26b780c110c0d95c691785143acd7dd2
parent 7f4a8a72
No related branches found
No related tags found
No related merge requests found
...@@ -142,6 +142,7 @@ allow appdomain shared_relro_file:dir search; ...@@ -142,6 +142,7 @@ allow appdomain shared_relro_file:dir search;
allow appdomain shared_relro_file:file r_file_perms; allow appdomain shared_relro_file:file r_file_perms;
# Allow apps to read/execute installed binaries # Allow apps to read/execute installed binaries
allow appdomain apk_data_file:dir r_dir_perms;
allow appdomain apk_data_file:file { rx_file_perms execmod }; allow appdomain apk_data_file:file { rx_file_perms execmod };
# /data/resource-cache # /data/resource-cache
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment