Merge changes from topic "cherrypicker-L58100000960054695:N31200001359782734" am: 66ef8f01ee am: 7e4c7b47a2
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2549731
Change-Id: Ib7a6476be234490f7d4053f6d2d423b5578744e0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/private/system_server.te b/private/system_server.te
index d5ce67d..df0dfa7 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -1108,6 +1108,7 @@
# Allow system process to measure fs-verity for apps, apps being installed and system files
allowxperm system_server { apk_data_file apk_tmp_file system_file }:file ioctl FS_IOC_MEASURE_VERITY;
+allowxperm system_server apk_tmp_file:file ioctl FS_IOC_SETFLAGS;
allow system_server system_file:file ioctl;
# Postinstall