app.te: grant /system dir/file/symlink read
Renderscript needs the ability to read directories on
/system. Allow it and file/symlink read access.
Addresses the following denials:
RenderScript: Invoking /system/bin/ld.mc with args '/system/bin/ld.mc -shared -nostdlib
/system/lib64/libcompiler_rt.so -mtriple=aarch64-none-linux-gnueabi
--library-path=/system/vendor/lib64 --library-path=/system/lib64
-lRSDriver -lm -lc
/data/user/0/com.android.rs.test/code_cache/com.android.renderscript.cache/primitives.o
-o
/data/user/0/com.android.rs.test/code_cache/com.android.renderscript.cache/librs.primitives.so'
ld.mc : type=1400 audit(0.0:1340): avc: denied { read } for name="lib64" dev="mmcblk0p24" ino=212 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:system_file:s0 tclass=dir permissive=0
ld.mc : type=1400 audit(0.0:1341): avc: denied { read } for name="lib64" dev="mmcblk0p29" ino=1187 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:system_file:s0 tclass=dir permissive=0
RenderScript: Child process "/system/bin/ld.mc" terminated with status 256
Change-Id: I9fb989f66975ed553dbc0c49e9c5b5e5bc45b3c3
1 file changed
