Merge "Allow apexd to label apk_tmp_file to apex_data_file" am: cc18ba7039 am: d23d33922c
am: 0abebec441
Change-Id: I8ff1727e4c85ae956491338606b3a563cb3a927a
diff --git a/private/apexd.te b/private/apexd.te
index 61e099b..7a1e4e2 100644
--- a/private/apexd.te
+++ b/private/apexd.te
@@ -40,6 +40,11 @@
# allow apexd to create symlinks in /apex
allow apexd apex_mnt_dir:lnk_file create_file_perms;
+# allow apexd to relabel apk_tmp_file to apex_data_file.
+# TODO(b/112669193) remove this when APEXes are staged via file descriptor
+allow apexd apk_tmp_file:file relabelfrom;
+allow apexd apex_data_file:file relabelto;
+
# Unmount and mount filesystems
allow apexd labeledfs:filesystem { mount unmount };