Merge "Preemptively adding services for pending commits."
diff --git a/bluetooth.te b/bluetooth.te
index 7d56d45..4e274c4 100644
--- a/bluetooth.te
+++ b/bluetooth.te
@@ -31,7 +31,7 @@
# Allow clients to use a socket provided by the bluetooth app.
# TODO: See if this is still required under bluedroid.
-allow bluetoothdomain bluetooth:unix_stream_socket { getopt getattr read write ioctl shutdown };
+allow bluetoothdomain bluetooth:unix_stream_socket { getopt setopt getattr read write ioctl shutdown };
# tethering
allow bluetooth self:tun_socket create_socket_perms;
diff --git a/isolated_app.te b/isolated_app.te
index 4745d7e..a156838 100644
--- a/isolated_app.te
+++ b/isolated_app.te
@@ -12,3 +12,9 @@
type isolated_app, domain;
app_domain(isolated_app)
net_domain(isolated_app)
+
+# read and write access to app_data_file is already
+# granted via app.te. Allow execute.
+# Needed to allow dlopen() from Chrome renderer processes.
+# See b/15902433 for details.
+allow isolated_app app_data_file:file execute;