commit 802cfe0f3d959f24d7c9c02785912c7e5ee58a1a
author Narayan Kamath <narayan@google.com> Thu Jan 17 13:38:05 2019 +0000
committer Narayan Kamath <narayan@google.com> Thu Jan 17 16:56:42 2019 +0000
tree b555c001c38fb928439349e2533774c0bf72d401
parent 4c3d11c018724af5a7f2405ca72e3407f78a1ad4

Allow installd sufficient permissions to rollback_data_file.

Used to capture and restore app data snapshots as implemented in change
I3e4d36c11e52fb885b585b1946e215cf986206fd.

Test: make, manual
Bug: 112431924

Change-Id: I1cd1ec3f9c93c4af65b662a5ada582299b595a8f

private/installd.te

diff --git a/private/installd.te b/private/installd.te
index 26d5ef6..0b7ec4e 100644
--- a/private/installd.te
+++ b/private/installd.te
@@ -23,3 +23,8 @@
 
 # Delete /system/bin/bcc generated artifacts
 allow installd app_exec_data_file:file unlink;
+
+# Capture userdata snapshots to /data/misc_[ce|de]/rollback and
+# subsequently restore them.
+allow installd rollback_data_file:dir create_dir_perms;
+allow installd rollback_data_file:file create_file_perms;