Skip to content
Snippets Groups Projects
Commit 53c84ed4 authored by Nick Kralevich's avatar Nick Kralevich
Browse files

isolated_app: allow app_data_file lock

Chrome's WebSQL implementation works by running sqlite in the
sandboxed renderer process, and sqlite expects to be able to
call flock() on the database file.

Bug: 20134929
Change-Id: Id33a2cd19b779144662056c6f3aba3365b0a2a54
parent 186c82ff
No related branches found
No related tags found
No related merge requests found
...@@ -13,7 +13,7 @@ type isolated_app, domain; ...@@ -13,7 +13,7 @@ type isolated_app, domain;
app_domain(isolated_app) app_domain(isolated_app)
# Access already open app data files received over Binder or local socket IPC. # Access already open app data files received over Binder or local socket IPC.
allow isolated_app app_data_file:file { read write getattr }; allow isolated_app app_data_file:file { read write getattr lock };
allow isolated_app activity_service:service_manager find; allow isolated_app activity_service:service_manager find;
allow isolated_app display_service:service_manager find; allow isolated_app display_service:service_manager find;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment