diff --git a/zygote.te b/zygote.te index 4708c3b8ceaad44f1ef53879d71913b9fe5e1d43..41b8c070b41a219d2c4f082eacdd76bed3474459 100644 --- a/zygote.te +++ b/zygote.te @@ -40,6 +40,12 @@ allow zygote dex2oat_exec:file rx_file_perms; allow zygote cgroup:dir create_dir_perms; allow zygote cgroup:{ file lnk_file } r_file_perms; allow zygote self:capability sys_admin; +# Allow zygote to stat the files that it opens. The zygote must +# be able to inspect them so that it can reopen them on fork +# if necessary: b/30963384 +allow zygote pmsg_device:chr_file { getattr }; +allow zygote debugfs_trace_marker:file { getattr }; + # Check validity of SELinux context before use. selinux_check_context(zygote) # Check SELinux permissions.