commit 801ee7aa9f7e78762d551eb2dfea6e7be31ebf39
author Treehugger Robot <treehugger-gerrit@google.com> Tue Dec 21 20:33:22 2021 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Dec 21 20:33:22 2021 +0000
tree 68fd387033ecefa3768fb4f252b53d798c85bffd
parent d144fa0333c35661824effc8fee5f60778932ae8
parent 2b95a08c99a290982d178651f095c1c1db65c2f1

Merge "zygote: Add setattr permission to cgroup"

prebuilts/api/32.0/private/zygote.te

diff --git a/prebuilts/api/32.0/private/zygote.te b/prebuilts/api/32.0/private/zygote.te
index 090e121..743647e 100644
--- a/prebuilts/api/32.0/private/zygote.te
+++ b/prebuilts/api/32.0/private/zygote.te
@@ -112,7 +112,7 @@
 
 # Control cgroups.
 allow zygote cgroup:dir create_dir_perms;
-allow zygote cgroup:{ file lnk_file } r_file_perms;
+allow zygote cgroup:{ file lnk_file } { r_file_perms setattr };
 allow zygote cgroup_v2:dir create_dir_perms;
 allow zygote cgroup_v2:{ file lnk_file } { r_file_perms setattr };
 allow zygote self:global_capability_class_set sys_admin;