Allow apps to read keychain_data_file links am: f247dcba

am: a3f6339a Change-Id: I755afa8558556df83c18e87fea526f76e6fa249f

Allow apps to read keychain_data_file links am: f247dcba
am: a3f6339a Change-Id: I755afa8558556df83c18e87fea526f76e6fa249f
6269ecd0 · Chad Brubaker · android-build-merger · bba39385 · a3f6339a · 6269ecd0
Commit 6269ecd0 authored 8 years ago by Chad Brubaker Committed by android-build-merger 8 years ago
--- a/app.te
+++ b/app.te
@@ -75,8 +75,7 @@ allow { appdomain -isolated_app } app_data_file:notdevfile_class_set create_file
 allow appdomain mnt_expand_file:dir r_dir_perms;

 # Keychain and user-trusted credentials
-allow appdomain keychain_data_file:dir r_dir_perms;
-allow appdomain keychain_data_file:file r_file_perms;
+r_dir_file(appdomain, keychain_data_file)
 allow appdomain misc_user_data_file:dir r_dir_perms;
 allow appdomain misc_user_data_file:file r_file_perms;