commit ffb8fb1b94e46dc1725c9083aa9e1f5e53c565d1
author TreeHugger Robot <treehugger-gerrit@google.com> Wed May 17 20:19:59 2017 +0000
committer Android (Google) Code Review <android-gerrit@google.com> Wed May 17 20:20:01 2017 +0000
tree b25f7e785698028ed51f59eb4cb33873b07a77d3
parent a82c3d57a297ebfb9a9a6ab71ac87e46c244b82f
parent e8ab0020ba58978e8d7f8b1b77ae36da1f3bffa0

Merge "Add fwk_display_hwservice." into oc-dev

private/app.te

diff --git a/private/app.te b/private/app.te
index 309d27c..4b9d87d 100644
--- a/private/app.te
+++ b/private/app.te
@@ -114,6 +114,7 @@
 # Allow apps access to /vendor/app except for privileged
 # apps which cannot be in /vendor.
 r_dir_file({ appdomain -ephemeral_app -untrusted_v2_app }, vendor_app_file)
+allow { appdomain -ephemeral_app -untrusted_v2_app } vendor_app_file:file execute;
 
 # Allow apps access to /vendor/overlay
 r_dir_file(appdomain, vendor_overlay_file)