commit 67f40ec5de73caea8f7989ec095ef7d6e8ce14e8
author Jeff Hao <jeffhao@google.com> Wed Apr 19 20:16:18 2017 +0000
committer Android (Google) Code Review <android-gerrit@google.com> Wed Apr 19 20:16:23 2017 +0000
tree ee34a2eee51447ead7fd184b9ed816ad8d758dc9
parent 5f22a4ddffa49a75b228f3e1250e07222abb2607
parent 37f5c2d9ebf89d8929f6f5500fd92cdb8daeab10

Merge "Add dex2oat permissions to open and read the tmp apk." into oc-dev

public/dex2oat.te

diff --git a/public/dex2oat.te b/public/dex2oat.te
index 2fb2336..4551e58 100644
--- a/public/dex2oat.te
+++ b/public/dex2oat.te
@@ -27,7 +27,8 @@
 allow dex2oat asec_apk_file:file read;
 allow dex2oat unlabeled:file read;
 allow dex2oat oemfs:file read;
-allow dex2oat apk_tmp_file:file read;
+allow dex2oat apk_tmp_file:dir search;
+allow dex2oat apk_tmp_file:file r_file_perms;
 allow dex2oat user_profile_data_file:file { getattr read lock };
 
 # Allow dex2oat to compile app's secondary dex files which were reported back to