| Ed Heyl | 8ee37b4 | 2014-07-14 23:32:08 -0700 | [diff] [blame] | 1 | # dex2oat |
| 2 | type dex2oat, domain; |
| 3 | type dex2oat_exec, exec_type, file_type; |
| 4 | |
| 5 | allow dex2oat dalvikcache_data_file:file write; |
| Igor Murashkin | f7ccfd0 | 2014-10-24 14:22:12 -0700 | [diff] [blame] | 6 | # Read symlinks in /data/dalvik-cache |
| 7 | allow dex2oat dalvikcache_data_file:lnk_file read; |
| Ed Heyl | 8ee37b4 | 2014-07-14 23:32:08 -0700 | [diff] [blame] | 8 | allow dex2oat installd:fd use; |
| Nick Kralevich | 94b2ba9 | 2014-07-16 09:38:06 -0700 | [diff] [blame] | 9 | |
| 10 | # Read already open asec_apk_file file descriptors passed by installd. |
| Nick Kralevich | e4aa75d | 2014-07-16 15:34:06 -0700 | [diff] [blame] | 11 | # Also allow reading unlabeled files, to allow for upgrading forward |
| 12 | # locked APKs. |
| Nick Kralevich | 94b2ba9 | 2014-07-16 09:38:06 -0700 | [diff] [blame] | 13 | allow dex2oat asec_apk_file:file read; |
| Nick Kralevich | e4aa75d | 2014-07-16 15:34:06 -0700 | [diff] [blame] | 14 | allow dex2oat unlabeled:file read; |
| Nick Kralevich | adbabee | 2014-11-26 11:46:06 -0800 | [diff] [blame] | 15 | allow dex2oat oemfs:file read; |