replicant-vendor_replicant/sepolicy/zygote.te

allow zygote themeservice_app_data_file:file r_file_perms;
allow zygote themeservice_app_data_file:dir r_dir_perms;

# ps command may do this
allow untrusted_app zygote:process getsched;
sepolicy: Put theme service in its own context Allow the theme manager and its data to be sandboxed in its own context Change-Id: I7898663d1c196bfe04fa4c539d20191a43fde284 2016-07-20 18:02:12 +00:00			`allow zygote themeservice_app_data_file:file r_file_perms;`
			`allow zygote themeservice_app_data_file:dir r_dir_perms;`
sepolicy: Apps need to read themed resources Assets such as composed icons and ringtones need to be accessed by apps. This patch adds the policy needed to facilitate this. Change-Id: If47920b2cc5dbafe8d71a621782bb4a3351bd68c 2015-01-05 23:30:16 +00:00
cm: Fix a few denials * Missed a few things when cleaning up devices. Change-Id: Ib71afd696a564aeeaa80c34ca9744a39891f4b63 2015-09-20 05:49:20 +00:00			`# ps command may do this`
			`allow untrusted_app zygote:process getsched;`