tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow init to execute extra_free_kbytes.sh script

Browse source 
extra_free_kbytes.sh is used by init to set /sys/vm/watermark_scale_factor
value. Allow init to execute extra_free_kbytes.sh and the script to access
/proc/sys/vm/watermark_scale_factor and /proc/sys/vm/extra_free_kbytes
files.

Bug: 109664768
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
Change-Id: I55ec07e12a1cc5322cfdd4a48d0bdc607f45d832
This commit is contained in:
Suren Baghdasaryan 2021-07-29 14:29:47 -07:00
parent 16c9c6a557
commit 6988677f22
6 changed files with 22 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/compat/31.0/31.0.ignore.cil
View file

@ -7,6 +7,8 @@
( new_objects
artd_service
camera2_extensions_prop
extra_free_kbytes
extra_free_kbytes_exec
hal_contexthub_service
hal_system_suspend_service
hal_tv_tuner_service
@ -17,6 +19,7 @@
tare_service
transformer_service
proc_watermark_boost_factor
proc_watermark_scale_factor
untrusted_app_30
proc_vendor_sched
sysfs_vendor_sched

3
private/extra_free_kbytes.te Normal file
View file

@ -0,0 +1,3 @@
typeattribute extra_free_kbytes coredomain;
init_daemon_domain(extra_free_kbytes)

1
private/file_contexts
View file

@ -222,6 +222,7 @@
/system/bin/e2fsdroid u:object_r:e2fs_exec:s0
/system/bin/mke2fs u:object_r:e2fs_exec:s0
/system/bin/e2fsck -- u:object_r:fsck_exec:s0
/system/bin/extra_free_kbytes\.sh u:object_r:extra_free_kbytes_exec:s0
/system/bin/fsck\.exfat -- u:object_r:fsck_exec:s0
/system/bin/fsck\.f2fs -- u:object_r:fsck_exec:s0
/system/bin/init u:object_r:init_exec:s0

1
private/genfs_contexts
View file

@ -87,6 +87,7 @@ genfscon proc /sys/vm/drop_caches u:object_r:proc_drop_caches:s0
genfscon proc /sys/vm/overcommit_memory u:object_r:proc_overcommit_memory:s0
genfscon proc /sys/vm/min_free_order_shift u:object_r:proc_min_free_order_shift:s0
genfscon proc /sys/vm/watermark_boost_factor u:object_r:proc_watermark_boost_factor:s0
genfscon proc /sys/vm/watermark_scale_factor u:object_r:proc_watermark_scale_factor:s0
genfscon proc /timer_list u:object_r:proc_timer:s0
genfscon proc /timer_stats u:object_r:proc_timer:s0
genfscon proc /tty/drivers u:object_r:proc_tty_drivers:s0

13
public/extra_free_kbytes.te Normal file
View file

@ -0,0 +1,13 @@
# The extra_free_kbytes.sh script run by init.
type extra_free_kbytes, domain;
type extra_free_kbytes_exec, system_file_type, exec_type, file_type;
# required permissions to run the script from init
allow extra_free_kbytes shell_exec:file rx_file_perms;
allow extra_free_kbytes system_file:file x_file_perms;
allow extra_free_kbytes toolbox_exec:file rx_file_perms;
# files used by the script
allow extra_free_kbytes proc_extra_free_kbytes:file rw_file_perms;
allow extra_free_kbytes proc_watermark_scale_factor:file rw_file_perms;
allow extra_free_kbytes proc_zoneinfo:file r_file_perms;

1
public/file.te
View file

@ -77,6 +77,7 @@ type proc_uptime, fs_type, proc_type;
type proc_version, fs_type, proc_type;
type proc_vmallocinfo, fs_type, proc_type;
type proc_vmstat, fs_type, proc_type;
type proc_watermark_scale_factor, fs_type, proc_type;
type proc_zoneinfo, fs_type, proc_type;
type proc_vendor_sched, proc_type, fs_type;
type selinuxfs, fs_type, mlstrustedobject;