| commit | 08bf97db8c66d52f6bad57363642e16f5096a302 | [log] [tgz] |
|---|---|---|
| author | Tri Vo <trong@google.com> | Wed Oct 02 15:24:56 2019 -0700 |
| committer | Tri Vo <trong@google.com> | Wed Oct 02 15:25:48 2019 -0700 |
| tree | c46abf0f44b0ee865ade34a34d1cdeaa0d91330b | |
| parent | cc3f9434366d3eea951bd3e82519195c7df45c35 [diff] |
sepolicy: allow zygote to use ashmem fds
Ashmem FD selinux labels have recently been changed (aosp/1127917) from
"ashmemd" to the label of the whichever process opens the fd, which
resulted in the following denial:
avc: denied { use } for
path="/dev/ashmemf5dc2dbf-d1e7-457e-b694-93c84704135e" dev="tmpfs"
ino=18972 ioctlcmd=0x7704 scontext=u:r:zygote:s0
tcontext=u:r:system_server:s0 tclass=fd permissive=1
Test: m selinux_policy
Change-Id: I4880420014bda21cd4f83e3d6190c3cfaa76822f