am cec3c1e4: am e0362602: Add capabilities to Zygote to fix valgrind.

* commit 'cec3c1e4':
  Add capabilities to Zygote to fix valgrind.

zygote.te

@@ -11,6 +11,9 @@ allow zygote self:capability setpcap;
 # Switch SELinux context to app domains.
 allow zygote system:process dyntransition;
 allow zygote appdomain:process dyntransition;
+# Allow zygote to read app data dirs (b/10455872)
+allow zygote appdomain:dir search;
+allow zygote appdomain:file { r_file_perms };
 # Move children into the peer process group.
 allow zygote system:process { getpgid setpgid };
 allow zygote appdomain:process { getpgid setpgid };