From 684cdb661559727242cc04a368ba803445bd8f7f Mon Sep 17 00:00:00 2001
From: Sudheer Shanka <sudheersai@google.com>
Date: Mon, 8 Oct 2018 15:06:20 -0700
Subject: [PATCH] Allow zygote to search sdcardfs dirs.
Bug: 117440207
Bug: 111890351
Test: manual
Change-Id: Ie218dec3e4f0f5dbade6d1c4d28b259909664056
---
private/zygote.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/private/zygote.te b/private/zygote.te
index 0b087acb7..ec04d8fbb 100644
--- a/private/zygote.te
+++ b/private/zygote.te
@@ -91,7 +91,7 @@ allow zygote mnt_user_file:lnk_file create_file_perms;
# Allowed to mount user-specific storage into place
allow zygote storage_file:dir { search mounton };
# Allow mounting on sdcardfs dirs
-allow zygote sdcardfs:dir { mounton };
+allow zygote sdcardfs:dir { search mounton };
# Handle --invoke-with command when launching Zygote with a wrapper command.
allow zygote zygote_exec:file rx_file_perms;
--
GitLab