Merge "[selinux] allow priv_app to get incremental progress"
diff --git a/private/system_app.te b/private/system_app.te
index f9d3c1c..0aa46e3 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -146,7 +146,6 @@
allow system_app wifi_key:keystore2_key {
delete
get_info
- grant
rebind
update
use
diff --git a/private/system_server.te b/private/system_server.te
index 115aff3..06673c3 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -871,6 +871,15 @@
use
};
+# Allow Wifi module to manage Wi-Fi keys.
+allow system_server wifi_key:keystore2_key {
+ delete
+ get_info
+ rebind
+ update
+ use
+};
+
# Allow system server to search and write to the persistent factory reset
# protection partition. This block device does not get wiped in a factory reset.
allow system_server block_device:dir search;