commit 5f8de11daea087993bfcd5d61411ccad21e88966
author Treehugger Robot <treehugger-gerrit@google.com> Tue Sep 08 21:39:26 2020 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Sep 08 21:39:26 2020 +0000
tree 5e36129db75c1106e6a928e0f0880e8742cb0590
parent a16308f09a9879c7f7af28d481327509e866523f
parent a5809013a4cc9ae93297eccf926cdcf3fca031b7

Merge "Allow GKI APEX to use apexd:fd"

private/gki_apex_prepostinstall.te

diff --git a/private/gki_apex_prepostinstall.te b/private/gki_apex_prepostinstall.te
index fa5cd14..1155389 100644
--- a/private/gki_apex_prepostinstall.te
+++ b/private/gki_apex_prepostinstall.te
@@ -18,3 +18,6 @@
 binder_use(gki_apex_prepostinstall)
 allow gki_apex_prepostinstall update_engine_stable_service:service_manager find;
 binder_call(gki_apex_prepostinstall, update_engine)
+
+# /dev/zero is inherited although it is not used. See b/126787589.
+allow gki_apex_prepostinstall apexd:fd use;