Allow incident to use userfaultfd
Incident section 1116 runs incident-helper-cmd, which runs app_process.
GC in app_process may be configured to use userfaultfd, so grant this
permission to incidentd.
Bug: 280222416
Flag: EXEMPT bugfix
Test: Collect bug report, then check for denial
Change-Id: Ia9aba613737325538d836282dedd872c99b0f2ef
diff --git a/private/incidentd.te b/private/incidentd.te
index bf98d31..11da9ea 100644
--- a/private/incidentd.te
+++ b/private/incidentd.te
@@ -25,6 +25,9 @@
# section id 1116, allow accessing statsd socket
unix_socket_send(incidentd, statsdw, statsd)
+# section id 1116, allow using userfaultfd
+userfaultfd_use(incidentd)
+
# section id 2001, allow reading /proc/pagetypeinfo
allow incidentd proc_pagetypeinfo:file r_file_perms;