| commit | f7894fc62ee82d72478ceb1a393741c642761766 | [log] [tgz] |
|---|---|---|
| author | Sandro <sandrom@google.com> | Mon Dec 12 17:16:34 2022 +0000 |
| committer | Sandro <sandrom@google.com> | Thu Dec 15 10:29:36 2022 +0000 |
| tree | 3b8a7d277b7e08f8ce547a079f0238d5cd06809c | |
| parent | f56dfeb2d4e8f61ddd82234c62263a9aa99529cd [diff] [blame] |
Allow sdk_sandbox to read files/directory in /data/local/tmp The /data/local/tmp directory is used by the CTS tests infrastructure to store various data, like the list of tests to include/exclude after failures http://cs/android-internal/tools/tradefederation/core/test_framework/com/android/tradefed/testtype/AndroidJUnitTest.java;l=333-347;rcl=bbd3902197b7de1a99aef4c22db8e14e4dbf1157 Without this CL, CTS modules that attempt to re-execute failures will get a '[INSTRUMENTATION_CRASH|SYSTEM_UNDER_TEST_CRASHED]' error. Test results before/after this CL: Before: http://ab/I04600010115474754 After: http://ab/I65000010115426482 Note the absence of "Module error" in the second case https://screenshot.googleplex.com/C6Ui3GdfgQBt8bp https://screenshot.googleplex.com/BDHKFfKJjnqVYpj Bug: 261864298 Test: atest CtsBluetoothTestCases --retry-any-failure -- --enable-optional-parameterization --enable-parameterized-modules --module-parameter run_on_sdk_sandbox Change-Id: Ibbb196f8c0ef1df320885ed8c56f20172f83d583
diff --git a/private/sdk_sandbox.te b/private/sdk_sandbox.te index 12310d2..a0e77a2 100644 --- a/private/sdk_sandbox.te +++ b/private/sdk_sandbox.te
@@ -213,6 +213,10 @@ allow sdk_sandbox system_linker_exec:file execute_no_trans; +# Required to read CTS tests data from the shell_data_file location. +allow sdk_sandbox shell_data_file:file r_file_perms; +allow sdk_sandbox shell_data_file:dir r_dir_perms; + # Write app-specific trace data to the Perfetto traced damon. This requires # connecting to its producer socket and obtaining a (per-process) tmpfs fd. perfetto_producer(sdk_sandbox)