commit 10fbf239b8905a98a066684ac8a8352d79c82d26
author Alan Stokes <alanstokes@google.com> Mon Jul 12 15:12:37 2021 +0100
committer Alan Stokes <alanstokes@google.com> Tue Jul 13 15:35:53 2021 +0100
tree 5e55c0fa1f76e47a6d4b5ebb272f93c453fa5acd
parent 4fea2f0e168dd9077c739e508ccf91f6fbed183d

Add policy for CompOS APEX data files.

Grant access to odsign to read & delete pending key files. Eventually
we will grant the CompOS daemon write access.

Bug: 190166662
Test: Via odsign; no denials seen.
Change-Id: I6d3c3e5b2aec8ef65bd28cbb274d18263534ce66

private/file_contexts

diff --git a/private/file_contexts b/private/file_contexts
index 8e341de..779a37a 100644
--- a/private/file_contexts
+++ b/private/file_contexts
@@ -568,6 +568,7 @@
 /data/misc/a11ytrace(/.*)?      u:object_r:accessibility_trace_data_file:s0
 /data/misc/apexdata(/.*)?       u:object_r:apex_module_data_file:s0
 /data/misc/apexdata/com\.android\.art(/.*)?           u:object_r:apex_art_data_file:s0
+/data/misc/apexdata/com\.android\.compos(/.*)?        u:object_r:apex_compos_data_file:s0
 /data/misc/apexdata/com\.android\.permission(/.*)?    u:object_r:apex_system_server_data_file:s0
 /data/misc/apexdata/com\.android\.scheduling(/.*)?    u:object_r:apex_system_server_data_file:s0
 /data/misc/apexdata/com\.android\.wifi(/.*)?          u:object_r:apex_system_server_data_file:s0