Allow dex2oat to access files received from sockets (#165)
On some devices `dex2oat` cannot access files (fd) received from sockets due to SELinux restrictions. Hence, we add a new rule according to the avc logs, which showed that permissions `open` and `getattr` were needed.
This commit is contained in:
parent
c9e11c6770
commit
209a5417ec
|
|
@ -6,6 +6,8 @@ type xposed_file file_type
|
|||
typeattribute xposed_file mlstrustedobject
|
||||
allow {dex2oat installd isolated_app shell} xposed_file {file dir} *
|
||||
|
||||
allow dex2oat unlabeled file *
|
||||
|
||||
type xposed_data file_type
|
||||
typeattribute xposed_data mlstrustedobject
|
||||
allow * xposed_data {file dir} *
|
||||
|
|
|
|||
Loading…
Reference in New Issue