Sanjana Sunil 898723d045 Allow zygote to relabel sdk_sandbox_system_data_file ... To perform sdk sandbox data isolation, the zygote gets the selinux label of SDK sandbox storage (e.g. /data/misc_{ce,de}/<user-id>/sdksandbox) before tmpfs is mounted onto /data/misc_{ce,de} (or other volumes). It relabels it back once bind mounting of required sandbox data is done. This change allows for the zygote to perform these operations. Bug: 214241165 Test: atest SdkSandboxStorageHostTest Ignore-AOSP-First: Already merged in aosp Change-Id: Ie8fd1f478fd12141bd6240cee96d0c3da55ba7a0 Merged-In: I28d1709ab4601f0fb1788435453ed19d023dc80b		2022-05-24 14:11:50 +00:00
..
private	Allow zygote to relabel sdk_sandbox_system_data_file	2022-05-24 14:11:50 +00:00
public	Allow vendor services to access vendor_system_native_prop	2022-05-13 17:57:18 +00:00