summaryrefslogtreecommitdiff
path: root/prebuilts/api/32.0/private/apex_test_prepostinstall.te
diff options
context:
space:
mode:
Diffstat (limited to 'prebuilts/api/32.0/private/apex_test_prepostinstall.te')
-rw-r--r--prebuilts/api/32.0/private/apex_test_prepostinstall.te20
1 files changed, 20 insertions, 0 deletions
diff --git a/prebuilts/api/32.0/private/apex_test_prepostinstall.te b/prebuilts/api/32.0/private/apex_test_prepostinstall.te
new file mode 100644
index 000000000..f1bc2145e
--- /dev/null
+++ b/prebuilts/api/32.0/private/apex_test_prepostinstall.te
@@ -0,0 +1,20 @@
+# APEX pre- & post-install test.
+#
+# Allow to run pre- and post-install hooks for APEX test modules
+# in debuggable builds.
+
+type apex_test_prepostinstall, domain, coredomain;
+type apex_test_prepostinstall_exec, system_file_type, exec_type, file_type;
+
+userdebug_or_eng(`
+ # /dev/zero
+ allow apex_test_prepostinstall apexd:fd use;
+ # Logwrapper.
+ create_pty(apex_test_prepostinstall)
+ # Logwrapper executing sh.
+ allow apex_test_prepostinstall shell_exec:file rx_file_perms;
+ # Logwrapper exec.
+ allow apex_test_prepostinstall system_file:file execute_no_trans;
+ # Ls.
+ allow apex_test_prepostinstall toolbox_exec:file rx_file_perms;
+')