Merge "sepolicy: allow zygote to use ashmem fds"
This commit is contained in:
commit
e10ff1e709
1 changed files with 3 additions and 0 deletions
|
@ -146,6 +146,9 @@ get_prop(zygote, device_config_runtime_native_boot_prop)
|
||||||
# ingore spurious denials
|
# ingore spurious denials
|
||||||
dontaudit zygote self:global_capability_class_set sys_resource;
|
dontaudit zygote self:global_capability_class_set sys_resource;
|
||||||
|
|
||||||
|
# Allow zygote to use ashmem fds from system_server.
|
||||||
|
allow zygote system_server:fd use;
|
||||||
|
|
||||||
###
|
###
|
||||||
### neverallow rules
|
### neverallow rules
|
||||||
###
|
###
|
||||||
|
|
Loading…
Reference in a new issue