commit 037a21ba15046f88cef40aa7a1495629d0df84b1
author Treehugger Robot <treehugger-gerrit@google.com> Tue Aug 24 23:35:34 2021 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Aug 24 23:35:34 2021 +0000
tree d1fc1992d0503e5a60c4629ce0de36705dd321e5
parent 56c495fca847f59b6182ed669313af8bb76f926a
parent 2e0fb00f2271b1ac94e18c38ee8d94a493b63c8e

Merge "Add /dev/vsock permissions to microdroid"

microdroid/system/private/dex2oat.te

diff --git a/microdroid/system/private/dex2oat.te b/microdroid/system/private/dex2oat.te
index cde824b..bf44251 100644
--- a/microdroid/system/private/dex2oat.te
+++ b/microdroid/system/private/dex2oat.te
@@ -9,7 +9,7 @@
 allow dex2oat compos:fd use;
 
 # Allow dex2oat to read/write FDs on authfs_fuse filesystem.
-allow dex2oat authfs_fuse:file rw_file_perms;
+allow dex2oat authfs_fuse:file { read write getattr map };
 
 # Minijail uses pipe for the parent process to signal the child (as a fallback
 # mechanism, since Android does not support minijail's preload).