commit | 20fe557ec57c057fef4bc96394ca6aff9571c587 | [log] [tgz] |
---|---|---|
author | Treehugger Robot <treehugger-gerrit@google.com> | Wed Mar 13 15:06:54 2019 +0000 |
committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Wed Mar 13 15:06:54 2019 +0000 |
tree | f60d45967a6f14cc95df0cb1daf98847f3c18312 | |
parent | 62e8da971398c5032af304a5439e8b4f64aa1fea [diff] | |
parent | 7263cb46039ee87c34163dd2e2de295f29eb8152 [diff] |
Merge "Sepolicy: Give sys_admin for relabel"
diff --git a/private/art_apex_postinstall.te b/private/art_apex_postinstall.te index 314fb7c..40b09d2 100644 --- a/private/art_apex_postinstall.te +++ b/private/art_apex_postinstall.te
@@ -17,6 +17,7 @@ # Required for relabel. allow art_apex_postinstall file_contexts_file:file r_file_perms; +allow art_apex_postinstall self:global_capability_class_set sys_admin; # Script helpers. allow art_apex_postinstall shell_exec:file rx_file_perms;