blob: 1899a7aeac616eceb468c7e76a14b739b9102a04
| 1 | allow zygote cpuctl_device:dir search; |
| 2 | allow zygote self:process execmem; |
| 3 | allow zygote mediaserver:process { getpgid setpgid }; |
| 4 | |
| 5 | allow zygote untrusted_app:process ptrace; |
| 6 | |
| 7 | allow zygote self:capability sys_nice; |
| 8 | |
| 9 | get_prop(zygote, media_prop) |
| 10 | |
| 11 | allow zygote kernel:system module_request; |
| 12 | |
| 13 | #allow zygote zygote_socket:sock_file { write }; |
| 14 | allow zygote adbd:unix_stream_socket { connectto read write }; |
| 15 |