From 8ad57ef6640beddd06eaa70e8f50b82ea02a674b Mon Sep 17 00:00:00 2001
From: Jin Qian <jinqian@google.com>
Date: Fri, 20 Jan 2017 20:29:13 -0800
Subject: [PATCH] storaged: allow reading packages.list
Delete rule for permission_service since we use packages.list instead.
Test: adb shell storaged -u
Bug: 34198239
Change-Id: Ic69d0fe185e627a932bbf8e85fc13163077bbe6b
---
private/storaged.te | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/private/storaged.te b/private/storaged.te
index 6b7fa50ce..c6276a31c 100644
--- a/private/storaged.te
+++ b/private/storaged.te
@@ -12,6 +12,9 @@ r_dir_file(storaged, domain)
# Read /proc/uid_io/stats
allow storaged proc_uid_io_stats:file r_file_perms;
+# Read /data/system/packages.list
+allow storaged system_data_file:file r_file_perms;
+
allow storaged self:capability { setgid setuid sys_nice sys_ptrace };
userdebug_or_eng(`
@@ -22,7 +25,6 @@ userdebug_or_eng(`
# Binder permissions
allow storaged storaged_service:service_manager add;
-allow storaged permission_service:service_manager find;
binder_use(storaged)
binder_call(storaged, system_server)
--
GitLab