platform_system_sepolicy/private/extra_free_kbytes.te

typeattribute extra_free_kbytes coredomain;

init_daemon_domain(extra_free_kbytes)

# Only extra_free_kbytes script is allowed to store these properties
set_prop(extra_free_kbytes, init_storage_prop)
Allow init to execute extra_free_kbytes.sh script extra_free_kbytes.sh is used by init to set /sys/vm/watermark_scale_factor value. Allow init to execute extra_free_kbytes.sh and the script to access /proc/sys/vm/watermark_scale_factor and /proc/sys/vm/extra_free_kbytes files. Bug: 109664768 Signed-off-by: Suren Baghdasaryan <surenb@google.com> Change-Id: I55ec07e12a1cc5322cfdd4a48d0bdc607f45d832 2021-07-29 23:29:47 +02:00			`typeattribute extra_free_kbytes coredomain;`

			`init_daemon_domain(extra_free_kbytes)`
Add policies for ro.kernel.watermark_scale_factor property New ro.kernel.watermark_scale_factor property is used to store the original value read from /proc/sys/vm/watermark_scale_factor before extra_free_kbytes.sh changes it. The original value is necessary to use the same reference point in case the script is invoked multiple times. The property is set by init the first time script is invoked and should never be changed afterwards. Bug: 242837506 Signed-off-by: Suren Baghdasaryan <surenb@google.com> Change-Id: I7760484854a41394a2efda9445cff8cb61587514 2022-09-07 22:13:47 +02:00
			`# Only extra_free_kbytes script is allowed to store these properties`
			`set_prop(extra_free_kbytes, init_storage_prop)`