sepolicy: fix comments around 'domain' access to search in /vendor
Effectively removes TODOs and finalizes the initial solution to allow
all domains access to 'vendor_file'.
Bug: 36681074
Test: Build and boot sailfish (no policy changes in the CL)
Change-Id: I50c05e20175c5273b34901809d967dd3e48bdb0e
Signed-off-by: Sandeep Patil <sspatil@google.com>
diff --git a/public/domain.te b/public/domain.te
index addf4cf..f16d277 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -123,12 +123,9 @@
allow domain vendor_configs_file:dir r_dir_perms;
allow domain vendor_configs_file:file { read open getattr };
-# TODO: (b/36681074) - Remove after this is resolved
-# TODO: (b/36680116, b/36656392, b/36681210) All need directory
-# lookup to find / open their libraries
full_treble_only(`
- # Everyone needs to lookup libraries in /vendor/lib(64)
- # through linker/loader.
+ # This is required "most likely" for LD_LIBRARY_PATH
+ # (b/36681074)
allow domain vendor_file:dir { getattr search };
# Allow reading and executing out of /vendor to all vendor domains