commit 3230efb5cf9138ac44430436de21aced750896b9
author Treehugger Robot <android-test-infra-autosubmit@system.gserviceaccount.com> Fri Mar 15 10:11:44 2024 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri Mar 15 10:11:44 2024 +0000
tree b6ad76457a5e0e1939ac3e26515979d01238f050
parent e47e58771fa2992ce2ff5d31afff3cdd8d360bea
parent 93a3d62f6b52d62cef6e17e0ed01c05400555280

Merge "bpfloader: allow bpffs_type:dir setattr" into main

private/apexd.te

diff --git a/private/apexd.te b/private/apexd.te
index b62e6e6..eeacf65 100644
--- a/private/apexd.te
+++ b/private/apexd.te
@@ -204,3 +204,6 @@
 
 # Allow set apex ready property
 set_prop(apexd, apex_ready_prop)
+
+# Allow apexd to write to statsd.
+unix_socket_send(apexd, statsdw, statsd)

private/bpfloader.te

diff --git a/private/bpfloader.te b/private/bpfloader.te
index 1f22fb9..2a0bb9d 100644
--- a/private/bpfloader.te
+++ b/private/bpfloader.te
@@ -18,7 +18,7 @@
 
 allow bpfloader sysfs_fs_fuse_bpf:file r_file_perms;
 
-allow bpfloader proc_bpf:file w_file_perms;
+allow bpfloader proc_bpf:file rw_file_perms;
 
 set_prop(bpfloader, bpf_progs_loaded_prop)