Allow apexd to realpath(3) on apex_key_files

am: ecc09871 Change-Id: I43f3d98669537d24879f3a734e2684968813e148

Allow apexd to realpath(3) on apex_key_files
am: ecc09871 Change-Id: I43f3d98669537d24879f3a734e2684968813e148
6d474849 · Jiyong Park · android-build-merger · b9c0ab6f · ecc09871 · 6d474849
Commit 6d474849 authored 6 years ago by Jiyong Park Committed by android-build-merger 6 years ago
--- a/private/apexd.te
+++ b/private/apexd.te
@@ -3,7 +3,7 @@ typeattribute apexd coredomain;
 init_daemon_domain(apexd)

 # Read /system/etc/security/apex_debug_key
-allow apexd apex_key_file:dir search;
+allow apexd apex_key_file:dir { search getattr };
 allow apexd apex_key_file:file r_file_perms;

 # Allow reading and writing of APEX files in the APEX data dir