commit de8dfc752c2dffd8866e471ad27492dbce946da9
author Treehugger Robot <treehugger-gerrit@google.com> Fri Oct 26 22:51:47 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri Oct 26 22:51:47 2018 +0000
tree f739c1bac93eff23b58fef402ceb2650a8622927
parent 67ed4328eb4835f4404151ee4bbb93d0f4500354
parent 0bfa7b53850cbe451a7f00bebe6da6869f0685c8

Merge "Switch to r_file_perms"

private/untrusted_app_all.te

diff --git a/private/untrusted_app_all.te b/private/untrusted_app_all.te
index 32eec26..54d278e 100644
--- a/private/untrusted_app_all.te
+++ b/private/untrusted_app_all.te
@@ -108,7 +108,7 @@
 # TODO (b/37784178) Consider creating  a special type for /vendor/app installed
 # apps.
 allow untrusted_app_all vendor_app_file:dir { open getattr read search };
-allow untrusted_app_all vendor_app_file:file { open getattr read execute };
+allow untrusted_app_all vendor_app_file:file { r_file_perms execute };
 allow untrusted_app_all vendor_app_file:lnk_file { open getattr read };
 
 # Write app-specific trace data to the Perfetto traced damon. This requires