Allow apps to read apex_art_data_file:dir
This should be ok since apps are already allowed to read the contained
files; the dir is iterated by tests to ensure that all files are signed
correctly.
Bug: 165630556
Test: new test passes
Change-Id: Ib6c298f2b267839a802c17288230a8151a1eec86
diff --git a/private/app.te b/private/app.te
index 33593aa..0c81515 100644
--- a/private/app.te
+++ b/private/app.te
@@ -67,8 +67,10 @@
allow appdomain font_data_file:file r_file_perms;
allow appdomain font_data_file:dir r_dir_perms;
+# Enter /data/misc/apexdata/
+allow appdomain apex_module_data_file:dir search;
# Read /data/misc/apexdata/com.android.art
-allow appdomain { apex_art_data_file apex_module_data_file }:dir search;
+allow appdomain apex_art_data_file:dir r_dir_perms;
allow appdomain apex_art_data_file:file r_file_perms;
# Allow access to tombstones if an fd to one is given to you.