Merge "Allow apexd to label apk_tmp_file to apex_data_file" am: cc18ba70

am: d23d3392

Change-Id: I5a5d8b102d6008a23d81626384cfde486dd8c4cc

private/apexd.te

@@ -40,6 +40,11 @@ allow apexd apex_mnt_dir:dir mounton;
 # allow apexd to create symlinks in /apex
 allow apexd apex_mnt_dir:lnk_file create_file_perms;
 
+# allow apexd to relabel apk_tmp_file to apex_data_file.
+# TODO(b/112669193) remove this when APEXes are staged via file descriptor
+allow apexd apk_tmp_file:file relabelfrom;
+allow apexd apex_data_file:file relabelto;
+
 # Unmount and mount filesystems
 allow apexd labeledfs:filesystem { mount unmount };