commit b66319392e3966260bf70c772db3c23ec55a82f8
author Yifan Hong <elsk@google.com> Wed Nov 21 21:51:01 2018 -0800
committer android-build-merger <android-build-merger@google.com> Wed Nov 21 21:51:01 2018 -0800
tree f48600601183845a3ed98e4790ce1e4688cbd3ee
parent 1b95e5b46832776690d221a7e33d8eff18d65871
parent f4771c25a88707ed7854e3656b79c86e8334722e

Merge "Allow to execute postinstall in adb sideload" am: d1b18a797e am: 2b113e5c32
am: f4771c25a8

Change-Id: I26e46aea52d6fbd59286bbe29b9dae42dbbc3f9a

public/postinstall.te

diff --git a/public/postinstall.te b/public/postinstall.te
index 7fd4dc6..2ef68bd 100644
--- a/public/postinstall.te
+++ b/public/postinstall.te
@@ -19,6 +19,11 @@
 allow postinstall system_file:file rx_file_perms;
 allow postinstall toolbox_exec:file rx_file_perms;
 
+# Allow postinstall to execute shell in recovery.
+recovery_only(`
+  allow postinstall rootfs:file rx_file_perms;
+')
+
 #
 # For OTA dexopt.
 #