commit bb4a0467f89638a4d8b7293208d9164a52165398
author Treehugger Robot <treehugger-gerrit@google.com> Tue Feb 25 10:16:56 2020 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Feb 25 10:16:56 2020 +0000
tree 7ccc4604864f51760255a1794b6af446be263dce
parent f173b143638fba317912f247d484a7176b3f26a5
parent 82ea55def0dc74f8b975a6f516afa9e483aad2cb

Merge "allow priv_apps to read from incremental_control_file"

private/priv_app.te

diff --git a/private/priv_app.te b/private/priv_app.te
index 75e9732..dd4d5c7 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -150,6 +150,9 @@
 # the Incremental File System
 allowxperm priv_app apk_data_file:file ioctl INCFS_IOCTL_READ_SIGNATURE;
 
+# allow privileged data loader apps (e.g. com.android.vending) to read logs from Incremental File System
+allow priv_app incremental_control_file:file { read getattr };
+
 ###
 ### neverallow rules
 ###