commit a036ede5c6e255ee04d12eba568271270e09051c
author Jooyung Han <jooyung@google.com> Fri Jul 30 12:41:14 2021 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri Jul 30 12:41:14 2021 +0000
tree d8524acd49d785bbc7e09b18f0ab6c55a7fd13c9
parent 2e8a281466001d2073caaa15bc44f6981798d903
parent f9a7dab6459df266b59f20d33680db1dbc21e559

Merge "Microdroid_manager is a bootstrap process"

microdroid/system/private/microdroid_manager.te

diff --git a/microdroid/system/private/microdroid_manager.te b/microdroid/system/private/microdroid_manager.te
index ac81c90..728d156 100644
--- a/microdroid/system/private/microdroid_manager.te
+++ b/microdroid/system/private/microdroid_manager.te
@@ -30,4 +30,8 @@
 # Let microdroid_manager to create a vsock connection back to the host VM
 allow microdroid_manager self:vsock_socket { create_socket_perms_no_ioctl };
 
+# microdroid_manager is using bootstrap bionic
+allow microdroid_manager system_bootstrap_lib_file:dir r_dir_perms;
+allow microdroid_manager system_bootstrap_lib_file:file { execute read open getattr map };
+
 neverallow microdroid_manager { file_type fs_type }:file execute_no_trans;