commit 8ee7e507992c7b32ba9ce7c3fca2077c213c7bdf
author Victor Hsieh <victorhsieh@google.com> Mon Sep 25 15:35:48 2023 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Mon Sep 25 15:35:48 2023 +0000
tree 5df676d7dc7068092875e3d9a1545a194b6b8c33
parent e11729f82567f3caf0a6a9efd1cd9dcbb6e31bfc
parent 6b71195fbed5dae5458ec13606aa595373158d99

Merge "Allow system_server to enable fs-verity on staging APK" into main

private/system_server.te

diff --git a/private/system_server.te b/private/system_server.te
index 1c3fbbb..5594874 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -1114,7 +1114,7 @@
 allow system_server toolbox_exec:file rx_file_perms;
 
 # Allow system process to setup fs-verity
-allowxperm system_server { apk_data_file system_data_file apex_system_server_data_file }:file ioctl FS_IOC_ENABLE_VERITY;
+allowxperm system_server { apk_data_file apk_tmp_file system_data_file apex_system_server_data_file }:file ioctl FS_IOC_ENABLE_VERITY;
 
 # Allow system process to measure fs-verity for apps, including those being installed
 allowxperm system_server { apk_data_file apk_tmp_file }:file ioctl FS_IOC_MEASURE_VERITY;