commit 6ba9073a9e2b2c1e8f54eb2214640dd9eb68f9a7
author Dmitry Shmidt <dimitrysh@google.com> Thu Jul 25 16:19:15 2019 -0700
committer Dmitry Shmidt <dimitrysh@google.com> Thu Jul 25 18:24:05 2019 -0700
tree ad68e0a37059ca23b1c0942923b9a6182744e39f
parent 51cec8c0780ccd696f7305c04d963d1de803b6f4

yukawa: Fix SELinux webview_zygote issue

Bug: 138401403
Test: Manual

Change-Id: Id2dba5ed1e6965c82c04d20cda4ca7973936ce4f
Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>

sepolicy/webview_zygote.te

diff --git a/sepolicy/webview_zygote.te b/sepolicy/webview_zygote.te
new file mode 100644
index 0000000..1be0d29
--- /dev/null
+++ b/sepolicy/webview_zygote.te
@@ -0,0 +1,6 @@
+allow webview_zygote zygote:unix_dgram_socket { write };
+allow webview_zygote tombstoned:unix_stream_socket { connectto };
+allow webview_zygote tombstoned:fd { use };
+allow webview_zygote tombstone_data_file:file { append };
+allow webview_zygote tombstoned_crash_socket:sock_file { write };
+allow webview_zygote zygote_exec:file { read open getattr };