Merge "Fix typo in file name."
diff --git a/private/bug_map b/private/bug_map
index 60a7337..b9c5b8c 100644
--- a/private/bug_map
+++ b/private/bug_map
@@ -1,4 +1,5 @@
cppreopts cppreopts capability 79414024
+crash_dump gpu_device chr_file 124468495
dnsmasq netd fifo_file 77868789
dnsmasq netd unix_stream_socket 77868789
init app_data_file file 77873135
diff --git a/private/zygote.te b/private/zygote.te
index c8bd87e..9fc0998 100644
--- a/private/zygote.te
+++ b/private/zygote.te
@@ -100,7 +100,8 @@
# TODO: reduce this back to only sdcardfs once b/123533205 is root-caused
# (Technically "sdcardfs" and "media_rw_data_file" are equivalent, since
# sdcardfs simply wraps files stored under /data/media.)
-allow zygote { sdcardfs media_rw_data_file vfat }:dir { create_dir_perms mounton };
+allow zygote { sdcard_type media_rw_data_file }:dir { create_dir_perms mounton };
+allow zygote { sdcard_type media_rw_data_file }:file { create_file_perms };
# Handle --invoke-with command when launching Zygote with a wrapper command.
allow zygote zygote_exec:file rx_file_perms;
diff --git a/public/update_engine_common.te b/public/update_engine_common.te
index 078a41b..b55f4bc 100644
--- a/public/update_engine_common.te
+++ b/public/update_engine_common.te
@@ -73,3 +73,6 @@
# get physical block device to map logical partitions on device mapper
allow update_engine_common block_device:dir r_dir_perms;
+
+# Allow update_engine_common to write to statsd socket.
+unix_socket_send(update_engine_common, statsdw, statsd)