blob: 0c47602570d18e4ae89c6e5cb9520e499ce1e27b
1 | allow zygote cpuctl_device:dir search; |
2 | allow zygote self:process execmem; |
3 | allow zygote mediaserver:process { getpgid setpgid }; |
4 | |
5 | allow zygote untrusted_app:process ptrace; |
6 | |
7 | allow zygote self:capability sys_nice; |
8 | |
9 | get_prop(zygote, media_prop) |
10 | |
11 | allow zygote kernel:system module_request; |
12 | |
13 | allow zygote vendor_file:file { read open getattr execute }; |
14 | |
15 | allow zygote cgroup:file { create }; |