commit 0bbe19a4c684d7ed7f8aa72f56f6c2f99f320971
author Treehugger Robot <treehugger-gerrit@google.com> Mon Mar 12 19:00:25 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Mon Mar 12 19:00:25 2018 +0000
tree 65c8df97dedf5b147fdd46d83f593ccc245dc63e
parent 463f8545d41a0a54fd7cbf3231543da37e5f2adc
parent dd6efea232c875ecf1dcb4a4feebcfa59590719c

Merge "Adding /odm support"

public/domain.te

diff --git a/public/domain.te b/public/domain.te
index fc9c0a9..b079b07 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -180,8 +180,9 @@
 allow domain vendor_configs_file:file { read open getattr };
 
 full_treble_only(`
-    # Allow all domains to be able to follow /system/vendor symlink
-    allow domain vendor_file:lnk_file { getattr open read };
+    # Allow all domains to be able to follow /system/vendor and/or
+    # /vendor/odm symlinks.
+    allow domain vendor_file_type:lnk_file { getattr open read };
 
     # This is required to be able to search & read /vendor/lib64
     # in order to lookup vendor libraries. The execute permission
@@ -912,7 +913,7 @@
         userdebug_or_eng(`-perfprofd')
         -postinstall_dexopt
         -system_server
-    } vendor_app_file:{ file lnk_file } r_file_perms;
+    } vendor_app_file:file r_file_perms;
 ')
 
 full_treble_only(`
@@ -939,7 +940,7 @@
         -system_server
         -webview_zygote
         -zygote
-    } vendor_overlay_file:{ file lnk_file } r_file_perms;
+    } vendor_overlay_file:file r_file_perms;
 ')
 
 full_treble_only(`