Merge "Finish fixing Zygote descriptor leakage problem"

This commit is contained in:
Dave Platt 2014-02-12 23:03:55 +00:00 committed by Gerrit Code Review
commit d20c0c23cb

4
app.te
View file

@ -17,10 +17,6 @@ unix_socket_connect(appdomain, keystore, keystore)
# Receive and use open file descriptors inherited from zygote.
allow appdomain zygote:fd use;
# Needed to close the zygote socket, which involves getopt / getattr
# This should be deleted after b/12061011 is fixed
allow appdomain zygote:unix_stream_socket { getopt getattr };
# gdbserver for ndk-gdb reads the zygote.
allow appdomain zygote_exec:file r_file_perms;