diff options
-rw-r--r-- | zygote.te | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -37,6 +37,13 @@ allow zygote dex2oat_exec:file rx_file_perms; # Control cgroups. allow zygote cgroup:dir create_dir_perms; allow zygote self:capability sys_admin; +# Allow zygote to stat the files that it opens. The zygote must +# be able to inspect them so that it can reopen them on fork +# if necessary: b/30963384 +# allow zygote pmsg_device:chr_file { getattr }; +allow zygote debugfs:dir search; +allow zygote debugfs:file { getattr }; + # Check validity of SELinux context before use. selinux_check_context(zygote) # Check SELinux permissions. |