platform_system_sepolicy/prebuilts/api
Bart Van Assche 052995e65e init.te: Allow init to modify the properties of loop devices
The init process configures swapping over zram over a loop device. An
I/O scheduler is associated with the loop device. Tests have shown that
no I/O scheduler works better than the default, mq-deadline. Hence
allow the init process to configure the loop device I/O scheduler.

Without this patch, the following SELinux denials are reported during
boot:

1     1 I auditd  : type=1400 audit(0.0:4): avc: denied { read write } for comm="init" name="scheduler" dev="sysfs" ino=78312 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_loop:s0 tclass=file permissive=0
1     1 I auditd  : type=1400 audit(0.0:4): avc: denied { read write } for comm="init" name="scheduler" dev="sysfs" ino=78312 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_loop:s0 tclass=file permissive=0

Bug: 194450129
Test: Built Android images and installed these on an Android device.
Ignore-AOSP-First: This patch is already in AOSP.
Merged-In: I0af0a92c53bb1f68b57f6814c431a7f03d8ea967
Change-Id: I0af0a92c53bb1f68b57f6814c431a7f03d8ea967
Signed-off-by: Bart Van Assche <bvanassche@acm.org>
2021-08-10 09:30:10 -07:00
..
26.0 Merge Android R (rvc-dev-plus-aosp-without-vendor@6692709) 2020-08-29 01:45:24 -07:00
27.0 Merge Android R (rvc-dev-plus-aosp-without-vendor@6692709) 2020-08-29 01:45:24 -07:00
28.0 Merge Android R (rvc-dev-plus-aosp-without-vendor@6692709) 2020-08-29 01:45:24 -07:00
29.0 Merge Android R (rvc-dev-plus-aosp-without-vendor@6692709) 2020-08-29 01:45:24 -07:00
30.0 system_app: remove adb data loader permissions am: 16b7d5d829 am: d775d04e7e 2021-06-30 17:24:00 +00:00
31.0 init.te: Allow init to modify the properties of loop devices 2021-08-10 09:30:10 -07:00