Skip to content
Snippets Groups Projects
Commit c4d7c0d7 authored by Nick Kralevich's avatar Nick Kralevich
Browse files

system_server.te: allow getopt/getattr on zygote socket

In 61dc3507, I forgot to allow
system_server to run getopt/getattr on the zygote socket.

Bug: 12061011
Change-Id: I14f8fc98c1b08dfd3c2188d562e594547dba69e6
parent 61dc3507
No related branches found
No related tags found
No related merge requests found
......@@ -13,6 +13,10 @@ allow system_server zygote:fd use;
allow system_server zygote:process sigchld;
allow system_server zygote_tmpfs:file read;
# Needed to close the zygote socket, which involves getopt / getattr
# This should be deleted after b/12061011 is fixed
allow system_server zygote:unix_stream_socket { getopt getattr };
# system server gets network and bluetooth permissions.
net_domain(system_server)
bluetooth_domain(system_server)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment