Merge "sepolicy: allow zygote to use ashmem fds"

This commit is contained in:
Tri Vo 2019-10-03 19:43:48 +00:00 committed by Gerrit Code Review
commit e10ff1e709

View file

@ -146,6 +146,9 @@ get_prop(zygote, device_config_runtime_native_boot_prop)
# ingore spurious denials # ingore spurious denials
dontaudit zygote self:global_capability_class_set sys_resource; dontaudit zygote self:global_capability_class_set sys_resource;
# Allow zygote to use ashmem fds from system_server.
allow zygote system_server:fd use;
### ###
### neverallow rules ### neverallow rules
### ###