Merge "Extend mediaextractor file read permissions" into oc-dev am: 910e60c7

am: b92c1659

Change-Id: Ia54fb969971c3b605f114fe76b36efdd084faa70

public/mediaextractor.te

@@ -23,6 +23,11 @@ crash_dump_fallback(mediaextractor)
 # allow mediaextractor read permissions for file sources
 allow mediaextractor media_rw_data_file:file { getattr read };
 
+# Read resources from open apk files passed over Binder
+allow mediaextractor apk_data_file:file { read getattr };
+allow mediaextractor asec_apk_file:file { read getattr };
+allow mediaextractor ringtone_file:file { read getattr };
+
 ###
 ### neverallow rules
 ###