592e06c910
sepolicy updates for running lmkd experiments. Bug: 194316048 Signed-off-by: Suren Baghdasaryan <surenb@google.com> Change-Id: I21df3b76cce925639385111bd23adf419f026a65
18 lines
446 B
Text
18 lines
446 B
Text
typeattribute lmkd coredomain;
|
|
|
|
init_daemon_domain(lmkd)
|
|
|
|
# Set sys.lmk.* properties.
|
|
set_prop(lmkd, system_lmk_prop)
|
|
|
|
# Set lmkd.* properties.
|
|
set_prop(lmkd, lmkd_prop)
|
|
|
|
# Get persist.device_config.lmk_native.* properties.
|
|
get_prop(lmkd, device_config_lmkd_native_prop)
|
|
|
|
allow lmkd fs_bpf:dir search;
|
|
allow lmkd fs_bpf:file read;
|
|
allow lmkd bpfloader:bpf map_read;
|
|
|
|
neverallow { domain -init -lmkd -vendor_init } lmkd_prop:property_service set;
|