From 66f25cb1af951d2064467b3af9e68bd7bfe01484 Mon Sep 17 00:00:00 2001 From: dcashman <dcashman@google.com> Date: Wed, 5 Mar 2014 10:18:12 -0800 Subject: [PATCH] Add auditallow to revaluate b/10498304 The environment has changed since b/10498304 and it may be the case that some of the changes introduced thereby are no longer necessary. Adding an auditallow will allow us to monitor the effects of removing these changes, without blocking other development. Change-Id: Id4ece1644877c4ba36df3050ac9073ea6320779c --- zygote.te | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/zygote.te b/zygote.te index 345b63004..225f43177 100644 --- a/zygote.te +++ b/zygote.te @@ -52,3 +52,8 @@ allow zygote ashmem_device:chr_file execute; allow zygote shell_data_file:file { write getattr }; allow zygote system_server:binder { transfer call }; allow zygote servicemanager:binder { call }; + +auditallow zygote ashmem_device:chr_file execute; +auditallow zygote shell_data_file:file { write getattr }; +auditallow zygote system_server:binder { transfer call }; +auditallow zygote servicemanager:binder { call }; -- GitLab