commit d6d5af1a96a58e31865172877a917af81133c738
author Narayan Kamath <narayan@google.com> Fri Jan 04 16:40:56 2019 +0000
committer Narayan Kamath <narayan@google.com> Mon Jan 07 19:15:10 2019 +0000
tree a802b357c17175cd7464943deb7d223436747305
parent ea57dea83e529d286a1358a2acee6f3c930ea3e4

Allow the system user to read apex_data_file.

For consistency with APKs, signature verification is performed
in the system_server. This includes checking that the signature of
an updated install matches the signature of the active package that
it updates. For this, it requires search access to /data/apex and
read access to the files under that directory.

Test: m
Change-Id: I8795b26b9a40ba7126c2a548fbec82ff322a1453

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index 483fc51..0ec6e17 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -544,7 +544,7 @@
 
     mkdir /data/anr 0775 system system
 
-    mkdir /data/apex 0770 root root
+    mkdir /data/apex 0750 root system
     mkdir /data/staging 0750 system system
 
     # NFC: create data/nfc for nv storage