Sepolicy: Allow postinstall to read links am: 3cc71b09 am: 87ec1d55

am: 8ef9a36a

Change-Id: I486d9f7de964f230dbd87b129dedbaf651991655

public/dex2oat.te

@@ -34,6 +34,7 @@ allow dex2oat app_data_file:file { getattr read write lock };
 allow dex2oat postinstall_dexopt:fd use;
 
 allow dex2oat postinstall_file:dir { getattr search };
+allow dex2oat postinstall_file:lnk_file read;
 
 # Allow dex2oat access to files in /data/ota.
 allow dex2oat ota_data_file:dir ra_dir_perms;

public/postinstall_dexopt.te

@@ -8,6 +8,7 @@ type postinstall_dexopt, domain;
 allow postinstall_dexopt self:capability { chown dac_override fowner setgid setuid };
 
 allow postinstall_dexopt postinstall_file:dir { getattr search };
+allow postinstall_dexopt postinstall_file:lnk_file read;
 allow postinstall_dexopt proc:file { getattr open read };
 allow postinstall_dexopt tmpfs:file read;