commit f2dc35baf3a3f36640b3eedce099a316b2d6bcee
author Yi Kong <yikong@google.com> Tue Mar 02 12:41:16 2021 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Mar 02 12:41:16 2021 +0000
tree 2b5f14cd0ae77d383f6c6973546facdc139752f1
parent 0fdd1f9f3763a045f0031ce1968d4d6cbe4ba888
parent fb621a4322c5c7e86b71cc491f2ac39ee157623f

Merge "Allow profcollectd to search bootstrap bionic libs dir"

private/odrefresh.te

diff --git a/private/odrefresh.te b/private/odrefresh.te
index 097098b..9c615fa 100644
--- a/private/odrefresh.te
+++ b/private/odrefresh.te
@@ -5,7 +5,7 @@
 # Allow odrefresh to create files and directories for on device signing.
 allow odrefresh apex_module_data_file:dir { getattr search };
 allow odrefresh apex_art_data_file:dir { create_dir_perms relabelfrom };
-allow odrefresh apex_art_data_file:file { open create write read getattr unlink };
+allow odrefresh apex_art_data_file:file create_file_perms;
 
 # Staging area labels (/data/misc/apexdata/com.android.art/staging). odrefresh
 # sets up files here and passes file descriptors for dex2oat to write to.