platform_system_core/lmkd/lmkd.rc

service lmkd /system/bin/lmkd
    class core
    group root readproc
    critical
    socket lmkd seqpacket 0660 system system
    writepid /dev/cpuset/system-background/tasks
bundle init.rc contents with its service Bug: 23186545 Change-Id: I52616b8ab1165fdef716f9b8f958665f2308c12e 2015-08-14 22:02:51 +02:00			`service lmkd /system/bin/lmkd`
			`class core`
Enable hidepid=2 on /proc Add the following mount options to the /proc filesystem: hidepid=2,gid=3009 This change blocks /proc access unless you're in group 3009 (aka AID_READPROC). Please see https://github.com/torvalds/linux/blob/master/Documentation/filesystems/proc.txt for documentation on the hidepid option. hidepid=2 is preferred over hidepid=1 since it leaks less information and doesn't generate SELinux ptrace denials when trying to access /proc without being in the proper group. Add AID_READPROC to processes which need to access /proc entries for other UIDs. Bug: 23310674 Change-Id: I22bb55ff7b80ff722945e224845215196f09dafa 2015-11-08 01:52:17 +01:00			`group root readproc`
bundle init.rc contents with its service Bug: 23186545 Change-Id: I52616b8ab1165fdef716f9b8f958665f2308c12e 2015-08-14 22:02:51 +02:00			`critical`
			`socket lmkd seqpacket 0660 system system`
resolved conflicts for 5caca3dd to mnc-dr-dev-plus-aosp Change-Id: I773e514a8232b77cdd566dc36c9efc4e15f206f0 2015-09-21 23:25:34 +02:00			`writepid /dev/cpuset/system-background/tasks`