Merge "Allow app_zygote to read zygote_tmpfs."

This commit is contained in:
Orion Hodson 2021-07-05 09:10:23 +00:00 committed by Gerrit Code Review
commit 829f582107

View file

@ -41,6 +41,9 @@ selinux_check_context(app_zygote)
# Check SELinux permissions.
selinux_check_access(app_zygote)
# Read and inspect temporary files managed by zygote.
allow app_zygote zygote_tmpfs:file { read getattr };
######
###### Policy below is shared with regular zygote-spawned apps
######