commit 2b113e5c32dbab708b95f20ab9b3f01a56ca3be6
author Yifan Hong <elsk@google.com> Wed Nov 21 21:26:12 2018 -0800
committer android-build-merger <android-build-merger@google.com> Wed Nov 21 21:26:12 2018 -0800
tree ed33105c4c0b35dceb42a2bfe20da577bc6067a5
parent d7491a2d6b95b03b7a3186b25b53c77da03fdd18
parent d1b18a797e994f64477b9edac3b71ca37d0d1a6a

Merge "Allow to execute postinstall in adb sideload"
am: d1b18a797e

Change-Id: I1ad54b12dff347a452c910b422c4ffc943d4b2c4

public/postinstall.te

diff --git a/public/postinstall.te b/public/postinstall.te
index 7fd4dc6..2ef68bd 100644
--- a/public/postinstall.te
+++ b/public/postinstall.te
@@ -19,6 +19,11 @@
 allow postinstall system_file:file rx_file_perms;
 allow postinstall toolbox_exec:file rx_file_perms;
 
+# Allow postinstall to execute shell in recovery.
+recovery_only(`
+  allow postinstall rootfs:file rx_file_perms;
+')
+
 #
 # For OTA dexopt.
 #