Merge "Add getattr access on tmpfs_zygote files for webview_zygote." am: 89946d7e1b

Change-Id: Ic22176854c83a2ad9bb8a7ec1a821358f8066e3e
This commit is contained in:
Automerger Merge Worker 2020-01-31 16:36:46 +00:00
commit 06c548de85

View file

@ -64,8 +64,8 @@ selinux_check_access(webview_zygote)
# Directory listing in /system.
allow webview_zygote system_file:dir r_dir_perms;
# Read system properties managed by zygote.
allow webview_zygote zygote_tmpfs:file read;
# Read and inspect temporary files (like system properties) managed by zygote.
allow webview_zygote zygote_tmpfs:file { read getattr };
# Child of zygote.
allow webview_zygote zygote:fd use;
allow webview_zygote zygote:process sigchld;