PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

system_server_startup: allow SIGCHLD to zygote

Browse Source 
avc: denied { sigchld } for comm="main"
scontext=u:r:system_server_startup:s0 tcontext=u:r:zygote:s0
tclass=process permissive=0

Test: build
Change-Id: I98c106b17ba1740f953c3108bd0fc927c150096f
This commit is contained in:
Jeff Vander Stoep 2019-04-04 09:25:15 -07:00
parent f99aa3cb66
commit 67dc274f87
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
private/system_server_startup.te
View File

@ -18,3 +18,6 @@ allow system_server_startup mnt_expand_file:dir getattr;
# system_server domain
allow system_server_startup self:process setcurrent;
allow system_server_startup system_server:process dyntransition;
# Child of the zygote.
allow system_server_startup zygote:process sigchld;