commit 8fa9b428c7fdc6ef9deb7b3e165cb20badafc80e
author Treehugger Robot <treehugger-gerrit@google.com> Tue Apr 06 19:06:56 2021 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Apr 06 19:06:56 2021 +0000
tree ab242a5975008a0b1a37b1a1106641e5a7bef446
parent a02227bd7ac097e07ebca6e9970ca976b2efda09
parent 4c6d3081fd4196a601c7b6c59d18c9faf824a9c4

Merge "Allow derive_classpath to read /apex."

private/derive_classpath.te

diff --git a/private/derive_classpath.te b/private/derive_classpath.te
index 71960d3..caa6058 100644
--- a/private/derive_classpath.te
+++ b/private/derive_classpath.te
@@ -4,6 +4,9 @@
 type derive_classpath_exec, system_file_type, exec_type, file_type;
 init_daemon_domain(derive_classpath)
 
+# Read /apex
+allow derive_classpath apex_mnt_dir:dir r_dir_perms;
+
 # Create /data/system/environ/classpath file
 allow derive_classpath environ_system_data_file:dir rw_dir_perms;
 allow derive_classpath environ_system_data_file:file create_file_perms;