Merge "sepolicy: Allow to receive FDs from app_zygote" am: 79f1fc195c
am: 99dfffed32
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1739055 Change-Id: Ic815e9a178e2d8f3001768811ed757597c373b49
This commit is contained in:
commit
046b657fc3
1 changed files with 3 additions and 0 deletions
|
@ -16,6 +16,9 @@ allow appdomain { ashmem_device ashmem_libcutils_device }:chr_file execute;
|
|||
# Receive and use open file descriptors inherited from zygote.
|
||||
allow appdomain zygote:fd use;
|
||||
|
||||
# Receive and use open file descriptors inherited from app zygote.
|
||||
allow appdomain app_zygote:fd use;
|
||||
|
||||
# gdbserver for ndk-gdb reads the zygote.
|
||||
# valgrind needs mmap exec for zygote
|
||||
allow appdomain zygote_exec:file rx_file_perms;
|
||||
|
|
Loading…
Reference in a new issue