diff --git a/zygote.te b/zygote.te index d8be1c01f14a431257e3b8a1891165af79acd94e..c6b343cd04f7c1615cd5962a92a7e365763e0e9b 100644 --- a/zygote.te +++ b/zygote.te @@ -39,6 +39,12 @@ allow zygote dex2oat_exec:file rx_file_perms; # Control cgroups. allow zygote cgroup:dir create_dir_perms; allow zygote self:capability sys_admin; +# Allow zygote to stat the files that it opens. The zygote must +# be able to inspect them so that it can reopen them on fork +# if necessary: b/30963384 +allow zygote pmsg_device:chr_file { getattr }; +allow zygote debugfs_trace_marker:file { getattr }; + # Check validity of SELinux context before use. selinux_check_context(zygote) # Check SELinux permissions.