tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

lmkd: grant access to /proc/lowmemorykiller

Browse source 
lmkd needs to read /proc/lowmemorykiller to send statslog events in response to
applications being killed.

Bug: 130017100
Change-Id: I929d5a372e1b2f63b7b5ed421f1898ebddaec01c
This commit is contained in:
Jim Blackler 2019-04-26 17:27:58 +01:00
parent 2798b5fc93
commit 3cfad10c04
4 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/28.0/28.0.cil
View file

@ -1379,6 +1379,7 @@
( proc ( proc
proc_fs_verity proc_fs_verity
proc_keys proc_keys
proc_lowmemorykiller
proc_pressure_cpu proc_pressure_cpu
proc_pressure_io proc_pressure_io
proc_pressure_mem proc_pressure_mem

1
private/genfs_contexts
View file

@ -13,6 +13,7 @@ genfscon proc /iomem u:object_r:proc_iomem:s0
genfscon proc /keys u:object_r:proc_keys:s0 genfscon proc /keys u:object_r:proc_keys:s0
genfscon proc /kmsg u:object_r:proc_kmsg:s0 genfscon proc /kmsg u:object_r:proc_kmsg:s0
genfscon proc /loadavg u:object_r:proc_loadavg:s0 genfscon proc /loadavg u:object_r:proc_loadavg:s0
genfscon proc /lowmemorykiller u:object_r:proc_lowmemorykiller:s0
genfscon proc /meminfo u:object_r:proc_meminfo:s0 genfscon proc /meminfo u:object_r:proc_meminfo:s0
genfscon proc /misc u:object_r:proc_misc:s0 genfscon proc /misc u:object_r:proc_misc:s0
genfscon proc /modules u:object_r:proc_modules:s0 genfscon proc /modules u:object_r:proc_modules:s0

1
public/file.te
View file

@ -32,6 +32,7 @@ type proc_iomem, fs_type, proc_type;
type proc_keys, fs_type, proc_type; type proc_keys, fs_type, proc_type;
type proc_kmsg, fs_type, proc_type; type proc_kmsg, fs_type, proc_type;
type proc_loadavg, fs_type, proc_type; type proc_loadavg, fs_type, proc_type;
type proc_lowmemorykiller, fs_type, proc_type;
type proc_max_map_count, fs_type, proc_type; type proc_max_map_count, fs_type, proc_type;
type proc_meminfo, fs_type, proc_type; type proc_meminfo, fs_type, proc_type;
type proc_misc, fs_type, proc_type; type proc_misc, fs_type, proc_type;

3
public/lmkd.te
View file

@ -47,6 +47,9 @@ allow lmkd domain:file { open read };
# reboot because orderly shutdown may not be possible. # reboot because orderly shutdown may not be possible.
allow lmkd proc_sysrq:file rw_file_perms; allow lmkd proc_sysrq:file rw_file_perms;
# Read /proc/lowmemorykiller
allow lmkd proc_lowmemorykiller:file r_file_perms;
# Read /proc/meminfo # Read /proc/meminfo
allow lmkd proc_meminfo:file r_file_perms; allow lmkd proc_meminfo:file r_file_perms;