commit de7244cf23b11ab8abff303a9b459742919eadf8
author Calin Juravle <calin@google.com> Mon Jul 13 18:53:38 2020 -0700
committer Calin Juravle <calin@google.com> Wed Jul 15 16:43:40 2020 +0000
tree fce02e28396a0ac14cece656851d640b98f1681d
parent 62f0a4d3066763260cd9300c80037948805356c3

Fix sepolicy for secondary dex files

dexoptanalyzer need read access on the secondary
dex files and of the main apk files in order to successfully evaluate
and optimize them.

Example of denial:
audit(0.0:30): avc: denied { read } for
path="/data/app/~~Zux_isdY0NBkRWPp01oAVg==/com.example.secondaryrepro-wH9zezMSCzIjcKdIMtrw7A==/base.apk"
dev="vdc" ino=40966 scontext=u:r:dexoptanalyzer:s0
tcontext=u:object_r:apk_data_file:s0 tclass=file permissive=0
app=com.example.secondaryrepro

Test: adb shell cmd package compile -r bg-dexopt --secondary-dex app
Bug: 160471235
Bug: 160351055
Change-Id: Id0bda5237d3ce1620d4f6ee89595836b4e1f3abf