Merge "Add getattr access on tmpfs_zygote files for webview_zygote." am: 89946d7e1b am: 06c548de85

Change-Id: I6ab5c78061a98ff523a7944ea84a2879bac3525e
This commit is contained in:
Automerger Merge Worker 2020-01-31 16:56:44 +00:00
commit 84b0dae577

View file

@ -64,8 +64,8 @@ selinux_check_access(webview_zygote)
# Directory listing in /system.
allow webview_zygote system_file:dir r_dir_perms;
# Read system properties managed by zygote.
allow webview_zygote zygote_tmpfs:file read;
# Read and inspect temporary files (like system properties) managed by zygote.
allow webview_zygote zygote_tmpfs:file { read getattr };
# Child of zygote.
allow webview_zygote zygote:fd use;
allow webview_zygote zygote:process sigchld;