sepolicy: give otapreopt getattr
(cherry picked from commit 88c514658544c3bf157d6b597c7ccfa7f3c17293)
Allow the otapreopt rename script to read file attributes. This is
being used to print the aggregate artifact size for diagnostic
purposes.
Bug: 30832951
Change-Id: Iee410adf59dcbb74fa4b49edb27d028025cd8bf9
diff --git a/otapreopt_slot.te b/otapreopt_slot.te
index b68b399..2f4da0a 100644
--- a/otapreopt_slot.te
+++ b/otapreopt_slot.te
@@ -11,8 +11,9 @@
init_daemon_domain(otapreopt_slot)
# The otapreopt_slot renames the OTA dalvik-cache to the regular dalvik-cache, and cleans up
-# the directory afterwards.
+# the directory afterwards. For logging of aggregate size, we need getattr.
allow otapreopt_slot ota_data_file:dir { rw_dir_perms rename reparent rmdir };
+allow otapreopt_slot ota_data_file:file { getattr };
# Delete old content of the dalvik-cache.
allow otapreopt_slot dalvikcache_data_file:dir { add_name getattr open read remove_name rmdir search write };