Add auditallow to revaluate b/10498304
The environment has changed since b/10498304 and it may be the case
that some of the changes introduced thereby are no longer necessary.
Adding an auditallow will allow us to monitor the effects of
removing these changes, without blocking other development.
Change-Id: Id4ece1644877c4ba36df3050ac9073ea6320779c
diff --git a/zygote.te b/zygote.te
index 345b630..225f431 100644
--- a/zygote.te
+++ b/zygote.te
@@ -52,3 +52,8 @@
allow zygote shell_data_file:file { write getattr };
allow zygote system_server:binder { transfer call };
allow zygote servicemanager:binder { call };
+
+auditallow zygote ashmem_device:chr_file execute;
+auditallow zygote shell_data_file:file { write getattr };
+auditallow zygote system_server:binder { transfer call };
+auditallow zygote servicemanager:binder { call };