Allow private app to access system app data file for ContentProvider
For ContentProvider case, private app can not access system app data. So we added this rule to solve this issue.
Bug: 157448040
Test: <Before modifying the rules, when the private app accesses files in the app-specific directory shared by the system app through the ContentProvider, the system will report selinux permission issue.
After modifying the rules and compiling the new version, the private app can access the files in the app-specific directory shared by the system app through the ContentProvider without any permission issues.>
Change-Id: I2433a6808d899c3729c6aa37c6c2d955e91e54a3
diff --git a/private/priv_app.te b/private/priv_app.te
index 7794ee8..d5b8d3f 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -157,6 +157,9 @@
allow priv_app apex_data_file:dir search;
allow priv_app staging_data_file:file r_file_perms;
+# allow priv app to access the system app data files for ContentProvider case.
+allow priv_app system_app_data_file:file { read getattr };
+
###
### neverallow rules
###