Merge "Update selinux policy for VrManager AIDL." into nyc-dev
diff --git a/bluetooth.te b/bluetooth.te
index ff664ab..4b20a58 100644
--- a/bluetooth.te
+++ b/bluetooth.te
@@ -57,7 +57,8 @@
# Access to /data/media.
# This should be removed if sdcardfs is modified to alter the secontext for its
# accesses to the underlying FS.
-allow bluetooth media_rw_data_file:dir search;
+allow bluetooth media_rw_data_file:dir create_dir_perms;
+allow bluetooth media_rw_data_file:file create_file_perms;
###
### Neverallow rules
diff --git a/system_server.te b/system_server.te
index 8d8c303..ac27256 100644
--- a/system_server.te
+++ b/system_server.te
@@ -497,6 +497,9 @@
# accesses to the underlying FS.
allow system_server media_rw_data_file:dir search;
+# Allow invoking tools like "timeout"
+allow system_server toolbox_exec:file rx_file_perms;
+
###
### Neverallow rules
###