Merge "sepolicy: Allow to receive FDs from app_zygote" am: 79f1fc195c am: 99dfffed32

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1739055

Change-Id: Ic815e9a178e2d8f3001768811ed757597c373b49
This commit is contained in:
Treehugger Robot 2021-06-21 13:57:14 +00:00 committed by Automerger Merge Worker
commit 046b657fc3

View file

@ -16,6 +16,9 @@ allow appdomain { ashmem_device ashmem_libcutils_device }:chr_file execute;
# Receive and use open file descriptors inherited from zygote.
allow appdomain zygote:fd use;
# Receive and use open file descriptors inherited from app zygote.
allow appdomain app_zygote:fd use;
# gdbserver for ndk-gdb reads the zygote.
# valgrind needs mmap exec for zygote
allow appdomain zygote_exec:file rx_file_perms;