platform_system_core/lmkd/lmkd.rc

service lmkd /system/bin/lmkd
    class core
    user lmkd
    group lmkd system readproc
    capabilities DAC_OVERRIDE KILL IPC_LOCK SYS_NICE SYS_RESOURCE
    critical
    socket lmkd seqpacket+passcred 0660 system system
    writepid /dev/cpuset/system-background/tasks
bundle init.rc contents with its service Bug: 23186545 Change-Id: I52616b8ab1165fdef716f9b8f958665f2308c12e 2015-08-14 22:02:51 +02:00			`service lmkd /system/bin/lmkd`
			`class core`
lmkd: limit capability set to minimum Set F() capability set and 'drop' lmkd from AID_ROOT to AID_LMKD uid and from AID_ROOT to AID_LMKD and AID_SYSTEM gid. /dev/memcg/memory.pressure defaults to root.root mode 0000, set it up as root.system mode 0040 to allow lmkd read access. Instrument failure to set SCHED_FIFO. Annotate access points that require elevated capabilities. Test: check /proc/`pidof lmkd`/status for capability set Test: lmkd_unit_test Bug: 77650566 Change-Id: I986081a0434cf6e842b63a55726380205b30a3ea 2018-04-09 18:50:32 +02:00			`user lmkd`
			`group lmkd system readproc`
			`capabilities DAC_OVERRIDE KILL IPC_LOCK SYS_NICE SYS_RESOURCE`
bundle init.rc contents with its service Bug: 23186545 Change-Id: I52616b8ab1165fdef716f9b8f958665f2308c12e 2015-08-14 22:02:51 +02:00			`critical`
lmkd: Restrict process record modifications to the client that created it Associate each registered process with the PID of the lmkd client that registered it to prevent one client from updating records of another client. Bug: 129011369 Test: boot and verify native service registration Change-Id: Id8ca7bb6314df225d04da6469b523d2cdc237eaa Signed-off-by: Suren Baghdasaryan <surenb@google.com> 2019-10-18 20:16:52 +02:00			`socket lmkd seqpacket+passcred 0660 system system`
resolved conflicts for 5caca3dd to mnc-dr-dev-plus-aosp Change-Id: I773e514a8232b77cdd566dc36c9efc4e15f206f0 2015-09-21 23:25:34 +02:00			`writepid /dev/cpuset/system-background/tasks`