diff --git a/public/installd.te b/public/installd.te index 08c438d6f11bcc70ed0c985a0eeb2105fea62303..3b4fd2e265500e62b95dba9adeb6b03de97d706f 100644 --- a/public/installd.te +++ b/public/installd.te @@ -130,6 +130,11 @@ allow installd permission_service:service_manager find; allow installd block_device:dir { search }; allow installd labeledfs:filesystem { quotaget quotamod }; +# Allow installd to delete from /data/preloads when trimming data caches +# TODO b/34690396 Remove when time-based purge policy for preloads is implemented in system_server +allow installd preloads_data_file:file { r_file_perms unlink }; +allow installd preloads_data_file:dir { r_dir_perms write remove_name rmdir }; + ### ### Neverallow rules ###