path: root/sepolicy/zygote.te (plain)
blob: 0c47602570d18e4ae89c6e5cb9520e499ce1e27b

1	allow zygote cpuctl_device:dir search;
2	allow zygote self:process execmem;
3	allow zygote mediaserver:process { getpgid setpgid };
4
5	allow zygote untrusted_app:process ptrace;
6
7	allow zygote self:capability sys_nice;
8
9	get_prop(zygote, media_prop)
10
11	allow zygote kernel:system module_request;
12
13	allow zygote vendor_file:file { read open getattr execute };
14
15	allow zygote cgroup:file { create };