diff options
author | Suren Baghdasaryan | 2018-03-29 14:30:58 -0500 |
---|---|---|
committer | Suren Baghdasaryan | 2018-04-13 16:35:52 -0500 |
commit | 76384b3ee04e78cd6032890118984773b21bec27 (patch) | |
tree | b05c5df3d8d91db605a20f76c3b9975ff1febe0b | |
parent | bf41ff48cf4597bd42ff7da631f56b7d5738bfa2 (diff) | |
download | system-sepolicy-76384b3ee04e78cd6032890118984773b21bec27.tar.gz system-sepolicy-76384b3ee04e78cd6032890118984773b21bec27.tar.xz system-sepolicy-76384b3ee04e78cd6032890118984773b21bec27.zip |
Selinux: Give lmkd read access to /proc/meminfo
Allow lmkd read access to /proc/meminfo for retrieving information
on memory state.
Change-Id: I7cf685813a5a49893c8f9a6ac4b5f6619f3c18aa
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
-rw-r--r-- | public/lmkd.te | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/public/lmkd.te b/public/lmkd.te index 5b6a7084..472946ec 100644 --- a/public/lmkd.te +++ b/public/lmkd.te | |||
@@ -43,6 +43,9 @@ allow lmkd domain:file { open read }; | |||
43 | # reboot because orderly shutdown may not be possible. | 43 | # reboot because orderly shutdown may not be possible. |
44 | allow lmkd proc_sysrq:file rw_file_perms; | 44 | allow lmkd proc_sysrq:file rw_file_perms; |
45 | 45 | ||
46 | # Read /proc/meminfo | ||
47 | allow lmkd proc_meminfo:file r_file_perms; | ||
48 | |||
46 | ### neverallow rules | 49 | ### neverallow rules |
47 | 50 | ||
48 | # never honor LD_PRELOAD | 51 | # never honor LD_PRELOAD |