Merge "Annotate most remaining HALs with _client/_server"
diff --git a/public/dex2oat.te b/public/dex2oat.te
index e547296..72b04a1 100644
--- a/public/dex2oat.te
+++ b/public/dex2oat.te
@@ -24,7 +24,7 @@
# Allow dex2oat to compile app's secondary dex files which were reported back to
# the framework.
-allow dex2oat app_data_file:file { getattr read write };
+allow dex2oat app_data_file:file { getattr read write lock };
##################
# A/B OTA Dexopt #
diff --git a/public/profman.te b/public/profman.te
index ff81540..a5c18b5 100644
--- a/public/profman.te
+++ b/public/profman.te
@@ -14,6 +14,11 @@
allow profman installd:fd use;
+# Allow profman to analyze profiles for the secondary dex files. These
+# are application dex files reported back to the framework when using
+# BaseDexClassLoader.
+allow profman app_data_file:file { getattr read write lock };
+
###
### neverallow rules
###