commit 4acd07323ee401fcb03e3c4d9d58bfada64ea9de
author Jiakai Zhang <jiakaiz@google.com> Wed Mar 20 11:24:54 2024 +0000
committer Jiakai Zhang <jiakaiz@google.com> Wed Mar 27 10:53:50 2024 +0000
tree fe071ec18f97059b3ea49d6faf480a46cf843100
parent 88e37d37f17672b3c580af5c43fa4da1f8d49997

Update SELinux policy for Pre-reboot Dexopt.

- Add pm.dexopt.* properties.
- Add rules for running artd in chroot.

Bug: 311377497
Test: manual - Run Pre-reboot Dexopt and see no denial.
Change-Id: If5ff9b23e99be033f19ab257c90e0f52bf250ccf

private/property_contexts

diff --git a/private/property_contexts b/private/property_contexts
index b4458ee..163f75e 100644
--- a/private/property_contexts
+++ b/private/property_contexts
@@ -675,9 +675,11 @@
 pm.dexopt.boot-after-ota.concurrency                    u:object_r:exported_pm_prop:s0 exact int
 pm.dexopt.boot-after-mainline-update                    u:object_r:exported_pm_prop:s0 exact string
 pm.dexopt.boot-after-mainline-update.concurrency        u:object_r:exported_pm_prop:s0 exact int
-
 pm.dexopt.post-boot                                     u:object_r:exported_pm_prop:s0 exact string
+pm.dexopt.post-boot.concurrency                         u:object_r:exported_pm_prop:s0 exact int
 pm.dexopt.ab-ota                                        u:object_r:exported_pm_prop:s0 exact string
+pm.dexopt.ab-ota.concurrency                            u:object_r:exported_pm_prop:s0 exact int
+
 pm.dexopt.cmdline                                       u:object_r:exported_pm_prop:s0 exact string
 pm.dexopt.inactive                                      u:object_r:exported_pm_prop:s0 exact string
 pm.dexopt.install                                       u:object_r:exported_pm_prop:s0 exact string