commit fe45425667f9eb784c0b12a342bb1bed2fa94a8d
author Yifan Hong <elsk@google.com> Thu Mar 05 16:41:16 2020 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Mar 05 16:41:16 2020 +0000
tree ac3bb8cfdcc52c370487e505be9389b67cdee70b
parent 975215578f0b10a35a36c02e7f265a063796729e
parent b34ede070da0360637b8562b78cd010b1c81ab94

Merge "Allow update_engine to search metadata_file:dir."

public/update_engine_common.te

diff --git a/public/update_engine_common.te b/public/update_engine_common.te
index 806944f..57d8e7e 100644
--- a/public/update_engine_common.te
+++ b/public/update_engine_common.te
@@ -81,5 +81,6 @@
 get_prop(update_engine_common, virtual_ab_prop)
 
 # Allow to read/write/create OTA metadata files for snapshot status and COW file status.
+allow update_engine_common metadata_file:dir search;
 allow update_engine_common ota_metadata_file:dir rw_dir_perms;
 allow update_engine_common ota_metadata_file:file create_file_perms;