| satayev | afc9791 | 2021-03-19 11:08:49 +0000 | [diff] [blame] | 1 | |
| 2 | # Domain for derive_classpath |
| 3 | type derive_classpath, domain, coredomain; |
| 4 | type derive_classpath_exec, system_file_type, exec_type, file_type; |
| 5 | init_daemon_domain(derive_classpath) |
| 6 | |
| Artur Satayev | 4c6d308 | 2021-03-29 15:39:33 +0100 | [diff] [blame] | 7 | # Read /apex |
| 8 | allow derive_classpath apex_mnt_dir:dir r_dir_perms; |
| 9 | |
| satayev | afc9791 | 2021-03-19 11:08:49 +0000 | [diff] [blame] | 10 | # Create /data/system/environ/classpath file |
| 11 | allow derive_classpath environ_system_data_file:dir rw_dir_perms; |
| 12 | allow derive_classpath environ_system_data_file:file create_file_perms; |
| 13 | |
| 14 | # b/183079517 fails on gphone targets otherwise |
| 15 | allow derive_classpath unlabeled:dir search; |
| Alex Light | 8393a05 | 2021-04-26 16:46:57 -0700 | [diff] [blame] | 16 | |
| 17 | # Allow derive_classpath to write the classpath into ota dexopt |
| 18 | # - Read the ota's apex dir |
| 19 | allow derive_classpath postinstall_apex_mnt_dir:dir r_dir_perms; |
| 20 | # - Report the BCP to the ota's dexopt |
| 21 | allow derive_classpath postinstall_dexopt:dir search; |
| 22 | allow derive_classpath postinstall_dexopt:fd use; |
| 23 | allow derive_classpath postinstall_dexopt:file read; |
| 24 | allow derive_classpath postinstall_dexopt:lnk_file read; |
| 25 | allow derive_classpath postinstall_dexopt_tmpfs:file rw_file_perms; |