Merge "Allow netd-spawned domains to use inherited netd unix_dgram_socket."
diff --git a/drmserver.te b/drmserver.te
index b419111..c8e0b21 100644
--- a/drmserver.te
+++ b/drmserver.te
@@ -37,3 +37,7 @@
# After taking a video, drmserver looks at the video file.
r_dir_file(drmserver, media_rw_data_file)
+
+# Read resources from open apk files passed over Binder.
+allow drmserver apk_data_file:file { read getattr };
+allow drmserver asec_apk_file:file { read getattr };
diff --git a/mediaserver.te b/mediaserver.te
index faec50d..43783d6 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -36,8 +36,9 @@
# XXX Label with a specific type?
allow mediaserver sysfs:file rw_file_perms;
-# XXX Why?
+# Read resources from open apk files passed over Binder.
allow mediaserver apk_data_file:file { read getattr };
+allow mediaserver asec_apk_file:file { read getattr };
# Access camera device.
allow mediaserver camera_device:chr_file rw_file_perms;
diff --git a/system_server.te b/system_server.te
index 9938079..ecd31b3 100644
--- a/system_server.te
+++ b/system_server.te
@@ -194,6 +194,7 @@
# ctl interface
allow system_server ctl_default_prop:property_service set;
+allow system_server ctl_bugreport_prop:property_service set;
# Create a socket for receiving info from wpa.
type_transition system_server wifi_data_file:sock_file system_wpa_socket;