commit 64137788f0b2cc8b09d605103857811868f81120
author Alex Klyubin <klyubin@google.com> Fri Sep 01 13:00:33 2017 -0700
committer Greg Hartman <ghartman@google.com> Thu Feb 22 18:20:45 2018 -0800
tree d9d746f052ebb774c718169b31af0d1abdfac792
parent fcb846f436595f59f50c17cf611169edf2d783e1

Grant execmem power to Zygote

external/swiftshader commit 10e1f74a65e44daafb6c8f3b10ee69d39a6ca024
made zygote crash at boot if it doesn't have this power.

denied { execmem } for scontext=u:r:zygote:s0 tcontext=u:r:zygote:s0 tclass=process

Test: Device boots
Bug: 65201432
Bug: 28053261
Change-Id: I19e2af9734b168a57ad91b3fc1ac884d6fb60364

shared/sepolicy/zygote.te

diff --git a/shared/sepolicy/zygote.te b/shared/sepolicy/zygote.te
new file mode 100644
index 0000000..38b67e0
--- /dev/null
+++ b/shared/sepolicy/zygote.te
@@ -0,0 +1,3 @@
+# TODO(b/65201432): Remove once execmem issue due to OpenGL is resolved.
+# external/swiftshader commit 10e1f74a65e44daafb6c8f3b10ee69d39a6ca024 triggers execmem in zygote
+allow zygote self:process execmem;