From 3df12275639c44d3c3623240d27a5d82d65b7421 Mon Sep 17 00:00:00 2001 From: Igor Murashkin Date: Fri, 24 Oct 2014 14:22:12 -0700 Subject: zygote/dex2oat: Grant additional symlink permissions * zygote needs to be able to symlink from dalvik cache to system to avoid having to copy boot.oat (when the boot.oat file was built with --compile-pic) * dex2oat needs to be able to read the symlink in the dalvik cache (the one that zygote creates) (cherry-picked from AOSP master 83c5612e69fa05610baf4f4d237fe0995a79cde5) Bug: 18035729 (cherry picked from commit f7ccfd003c07cf14159740748ab8aedfdeebc6b8) Change-Id: I5dca27241f46f481515b96e968fb2bef7866c89b --- dex2oat.te | 2 ++ zygote.te | 2 ++ 2 files changed, 4 insertions(+) diff --git a/dex2oat.te b/dex2oat.te index 2df9947..5fded36 100644 --- a/dex2oat.te +++ b/dex2oat.te @@ -3,6 +3,8 @@ type dex2oat, domain; type dex2oat_exec, exec_type, file_type; allow dex2oat dalvikcache_data_file:file write; +# Read symlinks in /data/dalvik-cache +allow dex2oat dalvikcache_data_file:lnk_file read; allow dex2oat installd:fd use; # Read already open asec_apk_file file descriptors passed by installd. diff --git a/zygote.te b/zygote.te index 5ee4eb8..67660b3 100644 --- a/zygote.te +++ b/zygote.te @@ -27,6 +27,8 @@ allow zygote keychain_data_file:file r_file_perms; # Write to /data/dalvik-cache. allow zygote dalvikcache_data_file:dir create_dir_perms; allow zygote dalvikcache_data_file:file create_file_perms; +# Create symlinks in /data/dalvik-cache +allow zygote dalvikcache_data_file:lnk_file create_file_perms; # Write to /data/resource-cache allow zygote resourcecache_data_file:dir rw_dir_perms; allow zygote resourcecache_data_file:file create_file_perms; -- cgit v1.2.3