commit c88f0efe3e659876c432ec403f410ec4507089f3
author Alan Stokes <alanstokes@google.com> Wed Apr 27 17:26:57 2022 +0100
committer Alan Stokes <alanstokes@google.com> Fri Apr 29 10:56:34 2022 +0000
tree 2acf28e26b9fa4f7cc5a1c39ce37fd2a2610e6ec
parent a77c2963e9c4bc1d4449e6660f2f9e13e3825c4d

Allow deleting old virtualization files

Allow init to use toolbox to rm -rf stale files under /data/misc/virtualizationservice.

Bug: 230056726
Test: Create fake stale dir+file, see them deleted
Change-Id: I4a31e437344974597fc5280d898f23780a820f16
(cherry picked from commit 8e06fb4109f9139bfdc3d88564e8ed5cf27c433c)

private/toolbox.te

diff --git a/private/toolbox.te b/private/toolbox.te
index a2b958d..1e53d72 100644
--- a/private/toolbox.te
+++ b/private/toolbox.te
@@ -1,3 +1,7 @@
 typeattribute toolbox coredomain;
 
 init_daemon_domain(toolbox)
+
+# rm -rf in /data/misc/virtualizationservice
+allow toolbox virtualizationservice_data_file:dir { rmdir rw_dir_perms };
+allow toolbox virtualizationservice_data_file:file { getattr unlink };