Merge "Label /data/media with its own type and allow access."
diff --git a/system_server.te b/system_server.te
index 2afafa6..0b1ec45 100644
--- a/system_server.te
+++ b/system_server.te
@@ -13,6 +13,10 @@
allow system_server zygote:process sigchld;
allow system_server zygote_tmpfs:file read;
+# Needed to close the zygote socket, which involves getopt / getattr
+# This should be deleted after b/12061011 is fixed
+allow system_server zygote:unix_stream_socket { getopt getattr };
+
# system server gets network and bluetooth permissions.
net_domain(system_server)
bluetooth_domain(system_server)