aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authordoc HD <doc.divxm@gmail.com>2017-08-02 19:34:39 +0300
committerdoc HD <doc.divxm@gmail.com>2017-08-02 19:34:39 +0300
commitc2b0a6e555659c1b84ca7d674e0ac6473247e33a (patch)
tree897075ba3898da3f68cefcb3c22385690f5fc2c0
parentae9a996333245fa2fff4c23a62d04473c7877f60 (diff)
parente7cd3302ee34a21ebc434089a80e0c3e5f75f7c4 (diff)
Merge branch 'cm-13.0' of https://github.com/LineageOS/android_external_sepolicy into mm6.0HEADmm6.0
Change-Id: Ie0b44cf12d6364285208c6df3e154c8f2f923ed9
-rw-r--r--zygote.te7
1 files changed, 7 insertions, 0 deletions
diff --git a/zygote.te b/zygote.te
index 66c345a..63989f3 100644
--- a/zygote.te
+++ b/zygote.te
@@ -37,6 +37,13 @@ allow zygote dex2oat_exec:file rx_file_perms;
# Control cgroups.
allow zygote cgroup:dir create_dir_perms;
allow zygote self:capability sys_admin;
+# Allow zygote to stat the files that it opens. The zygote must
+# be able to inspect them so that it can reopen them on fork
+# if necessary: b/30963384
+# allow zygote pmsg_device:chr_file { getattr };
+allow zygote debugfs:dir search;
+allow zygote debugfs:file { getattr };
+
# Check validity of SELinux context before use.
selinux_check_context(zygote)
# Check SELinux permissions.