1 # cppreopts 2 # 3 # This command copies preopted files from the system_b partition to the data 4 # partition. This domain ensures that we are only copying into specific 5 # directories. 6 7 type cppreopts, domain, mlstrustedsubject; 8 type cppreopts_exec, exec_type, file_type; 9 10 # Allow cppreopts copy files into the dalvik-cache 11 allow cppreopts dalvikcache_data_file:dir { add_name remove_name search write }; 12 allow cppreopts dalvikcache_data_file:file { create getattr open read rename write unlink }; 13 14 # Allow cppreopts to execute itself using #!/system/bin/sh 15 allow cppreopts shell_exec:file rx_file_perms; 16 17 # Allow us to run find on /postinstall 18 allow cppreopts system_file:dir { open read }; 19 20 # Allow running the cp command using cppreopts permissions. Needed so we can 21 # write into dalvik-cache 22 allow cppreopts toolbox_exec:file rx_file_perms; 23