Merge "sepolicy: allow zygote to use ashmem fds"
diff --git a/private/zygote.te b/private/zygote.te
index cf5a7a3..66e14b3 100644
--- a/private/zygote.te
+++ b/private/zygote.te
@@ -146,6 +146,9 @@
 # ingore spurious denials
 dontaudit zygote self:global_capability_class_set sys_resource;
 
+# Allow zygote to use ashmem fds from system_server.
+allow zygote system_server:fd use;
+
 ###
 ### neverallow rules
 ###