commit 870c448ace4288d4a70a61c530d956979725c641
author Jooyung Han <jooyung@google.com> Thu Dec 05 08:55:31 2019 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Dec 05 08:55:31 2019 +0000
tree 29b1f3c025ef469ace6e70f6f23ece49b03a528f
parent 60d75c2b04309848b21c395c32693f76e3261c72
parent 41870be726063219bf99fbe468c6e1e725fcdba8

Merge "Allow system_server to read/open apex_mnt_dir"

private/system_server.te

diff --git a/private/system_server.te b/private/system_server.te
index fa59ef8..3b40426 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -1010,6 +1010,9 @@
 allow system_server apex_service:service_manager find;
 allow system_server apexd:binder call;
 
+# Allow system server to scan /apex for flattened APEXes
+allow system_server apex_mnt_dir:dir r_dir_perms;
+
 # Allow system server to communicate to system-suspend's control interface
 allow system_server system_suspend_control_service:service_manager find;
 binder_call(system_server, system_suspend)