Merge "Allow system_server to read from postinstall scripts through STDIN." into main
diff --git a/private/system_server.te b/private/system_server.te
index 8326628..406c146 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -1652,6 +1652,10 @@
# /proc/self/fd/<fd> with a classloader.
allow system_server system_server_tmpfs:file open;
+# Allow system_server to read from postinstall scripts through STDIN, to check if the
+# otapreopt_script is still alive.
+allow system_server postinstall:fifo_file read;
+
# Do not allow any domain other than init or system server to get or set the property
neverallow { domain -init -system_server } crashrecovery_prop:property_service set;
neverallow { domain -init -dumpstate -system_server } crashrecovery_prop:file no_rw_file_perms;