PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add capabilities to Zygote to fix valgrind.

Browse Source 
Bug: 10455872
Change-Id: I98885e8cd1e4f9ab0d3e2af6d79b078a000db539
This commit is contained in:
Geremy Condra 2013-08-27 18:47:08 -07:00
parent 29d0d40668
commit e03626021e
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
zygote.te
View File

@ -11,6 +11,9 @@ allow zygote self:capability setpcap;
# Switch SELinux context to app domains.
allow zygote system:process dyntransition;
allow zygote appdomain:process dyntransition;
# Allow zygote to read app data dirs (b/10455872)
allow zygote appdomain:dir search;
allow zygote appdomain:file { r_file_perms };
# Move children into the peer process group.
allow zygote system:process { getpgid setpgid };
allow zygote appdomain:process { getpgid setpgid };