aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSuren Baghdasaryan2018-03-29 14:30:58 -0500
committerSuren Baghdasaryan2018-04-13 16:35:52 -0500
commit76384b3ee04e78cd6032890118984773b21bec27 (patch)
treeb05c5df3d8d91db605a20f76c3b9975ff1febe0b
parentbf41ff48cf4597bd42ff7da631f56b7d5738bfa2 (diff)
downloadsystem-sepolicy-76384b3ee04e78cd6032890118984773b21bec27.tar.gz
system-sepolicy-76384b3ee04e78cd6032890118984773b21bec27.tar.xz
system-sepolicy-76384b3ee04e78cd6032890118984773b21bec27.zip
Selinux: Give lmkd read access to /proc/meminfo
Allow lmkd read access to /proc/meminfo for retrieving information on memory state. Change-Id: I7cf685813a5a49893c8f9a6ac4b5f6619f3c18aa Signed-off-by: Suren Baghdasaryan <surenb@google.com>
-rw-r--r--public/lmkd.te3
1 files changed, 3 insertions, 0 deletions
diff --git a/public/lmkd.te b/public/lmkd.te
index 5b6a7084..472946ec 100644
--- a/public/lmkd.te
+++ b/public/lmkd.te
@@ -43,6 +43,9 @@ allow lmkd domain:file { open read };
43# reboot because orderly shutdown may not be possible. 43# reboot because orderly shutdown may not be possible.
44allow lmkd proc_sysrq:file rw_file_perms; 44allow lmkd proc_sysrq:file rw_file_perms;
45 45
46# Read /proc/meminfo
47allow lmkd proc_meminfo:file r_file_perms;
48
46### neverallow rules 49### neverallow rules
47 50
48# never honor LD_PRELOAD 51# never honor LD_PRELOAD