tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sepolicy: Grant system_server and init access to /proc/pressure/memory am: 251591fa04 am: efd9d3fdb1

Browse source 
am: 50cd647f85

Change-Id: Iab4b3442c6e34595e660a8a4bbd01700eaedcec3
This commit is contained in:
Tim Murray 2019-03-29 13:37:17 -07:00 committed by android-build-merger
commit af3639d08a
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/system_server.te
View file

@ -1019,6 +1019,9 @@ allow system_server metadata_file:dir search;
allow system_server password_slot_metadata_file:dir rw_dir_perms;
allow system_server password_slot_metadata_file:file create_file_perms;
# Read/Write /proc/pressure/memory
allow system_server proc_pressure_mem:file rw_file_perms;
# dexoptanalyzer is currently used only for secondary dex files which
# system_server should never access.
neverallow system_server dexoptanalyzer_exec:file no_x_file_perms;

3
public/init.te
View file

@ -554,6 +554,9 @@ allow servicemanager init:binder transfer;
# Allow calls from init to apexd
allow init apexd:binder call;
# Allow init to touch PSI monitors
allow init proc_pressure_mem:file { rw_file_perms setattr };
###
### neverallow rules
###