system_app.te: Allow System app to read /system_dlkm
Files under /system_dlkm are of type system_dlkm_file.
Settings needs to search and read /system_dlkm/etc/NOTICE.xml.gz
to generate NOTICE.html show licences information is available at
Settings -> About Phone -> Legal Information -> Third-party licenses
Test: Settings -> About Phone -> Legal Information -> Third-party licenses
Test: Inspect /data/user_de/0/com.android.settings/cache/NOTICE.html
Bug: 372589161
Change-Id: I96007b4af0c58c4bda74e97c15b80d4cd25a5551
Signed-off-by: Ramji Jiyani <ramjiyani@google.com>
diff --git a/private/system_app.te b/private/system_app.te
index 0b6ffe2..93be46f 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -199,3 +199,7 @@
allow system_app vendor_boot_ota_file:dir { r_dir_perms };
allow system_app vendor_boot_ota_file:file { r_file_perms };
+
+# allow system_app to read system_dlkm_file for /system_dlkm/etc/NOTICE.xml.gz
+allow system_app system_dlkm_file:dir search;
+allow system_app system_dlkm_file:file { getattr open read };