aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJessica Wagantall <jwagantall@cyngn.com>2016-11-08 15:12:45 -0800
committerJessica Wagantall <jwagantall@cyngn.com>2016-11-09 11:58:42 -0800
commite7cd3302ee34a21ebc434089a80e0c3e5f75f7c4 (patch)
tree4cc5a3450fa426d450b5d881bec8fc28a1d9f450
parentc6c90b3a7188a8ee30c446bda1e0e5ee3ff52b85 (diff)
parent21658af93cc6f83902a6d883957a353ed4700b13 (diff)
downloadandroid_external_sepolicy-e7cd3302ee34a21ebc434089a80e0c3e5f75f7c4.tar.gz
android_external_sepolicy-e7cd3302ee34a21ebc434089a80e0c3e5f75f7c4.tar.bz2
android_external_sepolicy-e7cd3302ee34a21ebc434089a80e0c3e5f75f7c4.zip
Merge tag 'android-6.0.1_r74' into HEADreplicant-6.0-0002replicant-6.0-0001
CYNGNOS-3303 Android 6.0.1 release 74 Change-Id: Icf0638b4bfa8716f8b4b1b63481755cf3420e613
-rw-r--r--zygote.te7
1 files changed, 7 insertions, 0 deletions
diff --git a/zygote.te b/zygote.te
index 66c345a..63989f3 100644
--- a/zygote.te
+++ b/zygote.te
@@ -37,6 +37,13 @@ allow zygote dex2oat_exec:file rx_file_perms;
# Control cgroups.
allow zygote cgroup:dir create_dir_perms;
allow zygote self:capability sys_admin;
+# Allow zygote to stat the files that it opens. The zygote must
+# be able to inspect them so that it can reopen them on fork
+# if necessary: b/30963384
+# allow zygote pmsg_device:chr_file { getattr };
+allow zygote debugfs:dir search;
+allow zygote debugfs:file { getattr };
+
# Check validity of SELinux context before use.
selinux_check_context(zygote)
# Check SELinux permissions.