commit 93318192a061e84acd6ff209d4a89bfd876903da
author Tri Vo <trong@google.com> Sat Oct 06 16:16:46 2018 -0700
committer Tri Vo <trong@google.com> Mon Oct 08 17:27:06 2018 +0000
tree cd8be242308f06fde99ed1b4a4adac23bd620f05
parent 012c895602843525a3fb4cef829ba6765be886c3

asan: global read access to /system/asan.options

Bug: 117178352
Test: no denials to /system/asan.options on asan walleye
Change-Id: I6042693afb926a22a3e2be79bd2a7ba062806143

private/compat/28.0/28.0.cil

diff --git a/private/compat/28.0/28.0.cil b/private/compat/28.0/28.0.cil
index 6e82651..e84c3ad 100644
--- a/private/compat/28.0/28.0.cil
+++ b/private/compat/28.0/28.0.cil
@@ -1565,6 +1565,7 @@
     system_data_file))
 (typeattributeset system_file_28_0
   ( system_file
+    system_asan_options_file
     system_lib_file
     system_linker_config_file
     system_linker_exec

private/file_contexts_asan

diff --git a/private/file_contexts_asan b/private/file_contexts_asan
index 17ee9d7..c7d72a4 100644
--- a/private/file_contexts_asan
+++ b/private/file_contexts_asan
@@ -4,6 +4,7 @@
 /data/asan/vendor/lib64(/.*)?              u:object_r:system_file:s0
 /data/asan/odm/lib(/.*)?                   u:object_r:system_file:s0
 /data/asan/odm/lib64(/.*)?                 u:object_r:system_file:s0
+/system/asan.options           u:object_r:system_asan_options_file:s0
 /system/bin/asan_extract       u:object_r:asan_extract_exec:s0
 /system/bin/asanwrapper        u:object_r:asanwrapper_exec:s0
 /system/bin/asan/app_process   u:object_r:zygote_exec:s0