966efedec8
This leaves only the existence of zygote domain and its
executable's zygote_exec file label as public API. All other rules are
implementation details of this domain's policy and are thus now
private.
Test: Device boot, apps (untrusted_app, system_app, platform_app,
priv_app) work fine. No new denials.
Bug: 31364497
Change-Id: Ie37128531be841b89ecd602992d83d77e26533bc
3 lines
70 B
Text
3 lines
70 B
Text
# zygote
|
|
type zygote, domain;
|
|
type zygote_exec, exec_type, file_type;
|