SElinux policies for compiling secondary dex files
This CLs adds SElinux policies necessary to compile secondary dex files. When an app loads secondary dex files via the base class loader the files will get reported to PM. During maintance mode PM will compile the secondary dex files which were used via the standard installd model (fork, exec, change uid and lower capabilities). What is needed: dexoptanalyzer - needs to read the dex file and the boot image in order to decide if we need to actually comppile. dex2oat - needs to be able to create *.oat files next to the secondary dex files. Test: devices boots compilation of secondary dex files works without selinux denials cmd package compile --secondary-dex -f -m speed com.google.android.gms Bug: 32871170 Change-Id: I038955b5bc9a72d49f6c24c1cb76276e0f53dc45
Showing
- private/dexoptanalyzer.te 26 additions, 0 deletionsprivate/dexoptanalyzer.te
- private/file_contexts 1 addition, 0 deletionsprivate/file_contexts
- private/installd.te 3 additions, 0 deletionsprivate/installd.te
- private/system_server.te 4 additions, 0 deletionsprivate/system_server.te
- public/dex2oat.te 4 additions, 0 deletionspublic/dex2oat.te
Loading
Please register or sign in to comment