From 50bb739532cdb79a49f45fe771f48d60ea18d6ff Mon Sep 17 00:00:00 2001
From: Chenyang Zhong <zhongcy95@gmail.com>
Date: Sun, 7 Nov 2021 06:34:30 -0500
Subject: [PATCH] sdm710-common: sepolicy: allow system_server to get
 app_zygote pgid

avc: denied { getpgid } for scontext=u:r:system_server:s0 tcontext=u:r:app_zygote:s0:c512,c768 tclass=process permissive=0

Appeared during UiBench.

Signed-off-by: Chenyang Zhong <zhongcy95@gmail.com>
---
 sepolicy/private/system_server.te | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 sepolicy/private/system_server.te

diff --git a/sepolicy/private/system_server.te b/sepolicy/private/system_server.te
new file mode 100644
index 0000000..3bdf438
--- /dev/null
+++ b/sepolicy/private/system_server.te
@@ -0,0 +1 @@
+allow system_server app_zygote:process getpgid;