blob: 683ea4796c21aa4de19de8cfbe1a380bd7b58464
| 1 | allow zygote cpuctl_device:dir search; |
| 2 | allow zygote self:process execmem; |
| 3 | allow zygote mediaserver:process { getpgid setpgid }; |
| 4 | |
| 5 | allow zygote untrusted_app:process ptrace; |
| 6 | |
| 7 | allow zygote self:capability sys_nice; |
| 8 | |
| 9 | get_prop(zygote, media_prop) |
| 10 | |
| 11 | allow zygote kernel:system module_request; |
| 12 | |
| 13 | allow zygote vendor_file:file { read open getattr execute }; |
| 14 |