| commit | acc937e3ab13667748b70bb05668de3e8b3c1750 | [log] [tgz] |
|---|---|---|
| author | Treehugger Robot <android-test-infra-autosubmit@system.gserviceaccount.com> | Thu Mar 20 19:45:51 2025 -0700 |
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Thu Mar 20 19:45:51 2025 -0700 |
| tree | e117ba84c57b51da3125dc26fe6a9e74cb5d29dd | |
| parent | e3d40c22943d3348ebde6c8c40a3eb4c6886d01e [diff] | |
| parent | 60647ea2f92945ef5235eccb8f5eec19d158e030 [diff] |
Merge "sepolicy: Allow prefetch to open/read rootfs" into main
diff --git a/private/prefetch.te b/private/prefetch.te index 21287f3..69008b5 100644 --- a/private/prefetch.te +++ b/private/prefetch.te
@@ -22,3 +22,7 @@ -init -shell } ctl_prefetch_prop:property_service set; + +# Allow rootfs so prefetch can walk through directory tree and +# create a map of inodes -> file path. +allow prefetch rootfs:dir { open read search getattr };