commit 06575ee40c5ddc0f151270dd1679d5c0ceeb333e
author Geremy Condra <gcondra@google.com> Wed Mar 27 19:55:40 2013 -0700
committer repo sync <gcondra@google.com> Fri Mar 29 16:29:54 2013 -0700
tree 1bc138638047993b5e53ccb11a3de4902c8e15e2
parent 020b5ff6311044ef7a2200dd4db69f5cccf46213

Add remount capability to Zygote.

This is a consequence of https://googleplex-android-review.googlesource.com/#/c/278069/

Change-Id: I9b310860534a80e7145950f6c632cf5ba0ad56a7

zygote.te

diff --git a/zygote.te b/zygote.te
index 33e8fe8..3f02293 100644
--- a/zygote.te
+++ b/zygote.te
@@ -37,6 +37,7 @@
 dontaudit zygote self:capability fsetid;
 allow zygote tmpfs:dir { write create add_name setattr mounton search };
 allow zygote tmpfs:filesystem mount;
+allow zygote labeledfs:filesystem remount;
 
 # Handle --invoke-with command when launching Zygote with a wrapper command.
 allow zygote zygote_exec:file { execute_no_trans open };