tag 549eb49febfbc7e7341fe7a6d569d8102b5ac80a
tagger The Android Open Source Project <initial-contribution@android.com> Mon Aug 07 16:43:40 2017 -0700
object 8f6870534923b7bd383e0e7eec0ca1f6d76e5fa3

Android o preview 4

commit 8f6870534923b7bd383e0e7eec0ca1f6d76e5fa3
author Tianjie Xu <xunchang@google.com> Fri Jun 23 15:48:42 2017 -0700
committer Tianjie Xu <xunchang@google.com> Sun Jul 16 21:35:28 2017 +0000
tree f9613ffd8e45df266691f9ae6c898052c684ab08
parent 9273c1bb5ca9b2ea71f2e35adbc170950fcdb9d1

Allow update_engine to read postinstall_mnt_dir

The denial message:
update_engine: type=1400 audit(0.0:15213): avc: denied { getattr } for
path="/postinstall" dev="dm-0" ino=38 scontext=u:r:update_engine:s0
tcontext=u:object_r:postinstall_mnt_dir:s0 tclass=dir permissive=0

update_engine: type=1400 audit(0.0:15214): avc: denied { sys_rawio } for
capability=17 scontext=u:r:update_engine:s0 tcontext=u:r:update_engine:s0
tclass=capability permissive=0

auditd  : type=1400 audit(0.0:15213): avc: denied { getattr } for
comm="update_engine" path="/postinstall" dev="dm-0" ino=38
scontext=u:r:update_engine:s0 tcontext=u:object_r:postinstall_mnt_dir:s0
tclass=dir permissive=0

update_engine: [0428/070905:ERROR:utils.cc(716)] Error stat'ing /postinstall: Permission denied

Bug: 37760573
Test: apply an update and UE reads postinstall_mnt_dir without denial.
Change-Id: I55506f5e8544233f60ccf7c1df846c9c93946a25