| commit | d2703d21814c3f869fed97c74596bb4ba661806c | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Mon Jun 24 16:54:49 2013 -0700 |
| committer | Nick Kralevich <nnk@google.com> | Mon Jun 24 16:54:49 2013 -0700 |
| tree | 6ff43ec292f452a068883a98a35d29bc5590d7b0 | |
| parent | 0eed3476dca910e8ce70a6568c8a219c25744287 [diff] |
allow system server to control zygote spawned processes System server needs to be able to tell Zygote to create processes with differing ids, capabilities, and SELinux security information. Allow it. These rules are not in unconfined.te, and as a result, are not automatically allowed by SELinux in enforcing mode. Change-Id: I010eaa2b0e0cee5d995e08e6c785cc5e01b2c974