| commit | 7e4c7b47a2d7e60c551ded4abf7a9b76812b5fd7 | [log] [tgz] |
|---|---|---|
| author | Eric Rahm <erahm@google.com> | Thu Apr 20 15:50:42 2023 +0000 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Thu Apr 20 15:50:42 2023 +0000 |
| tree | 8cc6aa68ac454d10f4ea85886cc2498f7a5ffff7 | |
| parent | 4606eaa950b1282a7730d80dc5433c193fff2f16 [diff] | |
| parent | 66ef8f01ee74fc9ffba75bcab70f5e4ed6898dbc [diff] |
Merge changes from topic "cherrypicker-L58100000960054695:N31200001359782734" am: 66ef8f01ee Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2549731 Change-Id: I1e806c6f293c964bf949b0cd4d14ee70eea0201b Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/private/system_server.te b/private/system_server.te index d5ce67d..df0dfa7 100644 --- a/private/system_server.te +++ b/private/system_server.te
@@ -1108,6 +1108,7 @@ # Allow system process to measure fs-verity for apps, apps being installed and system files allowxperm system_server { apk_data_file apk_tmp_file system_file }:file ioctl FS_IOC_MEASURE_VERITY; +allowxperm system_server apk_tmp_file:file ioctl FS_IOC_SETFLAGS; allow system_server system_file:file ioctl; # Postinstall