Merge "Legacy app compatibility workaround" into main
diff --git a/private/domain.te b/private/domain.te
index 8db40a5..b3d72e0 100644
--- a/private/domain.te
+++ b/private/domain.te
@@ -2146,6 +2146,7 @@
-init
-otapreopt_chroot
userdebug_or_eng(`-overlay_remounter')
+ userdebug_or_eng(`-zygote')
} {
system_file_type
vendor_file_type
diff --git a/private/zygote.te b/private/zygote.te
index 4815ecc..62312cc 100644
--- a/private/zygote.te
+++ b/private/zygote.te
@@ -80,6 +80,11 @@
properties_device
}:dir { mounton search };
+# Legacy app compat
+userdebug_or_eng(`
+ allow zygote system_file:dir { mounton };
+')
+
# Traverse /data_mirror to get to the above directories while their normal paths
# are hidden, in order to bind-mount allowlisted per-app directories.
allow zygote mirror_data_file:dir search;