From 2561a9afbed0719c6e02a5ff9a1c8f55f4dc8792 Mon Sep 17 00:00:00 2001
From: Stephen Smalley <sds@tycho.nsa.gov>
Date: Tue, 11 Feb 2014 09:44:43 -0500
Subject: [PATCH] Make lmkd permissive or unconfined.

Otherwise we'll never see denials in userdebug or eng builds and
never make progress on confining it.  Of course we cannot truly
test until it is released into AOSP, but this prepares the way
and potentially allows for internal testing and collection of denials.

Change-Id: Ic9d1ba872d43f322e39ca6cffa0e725f1e223e7b
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
---
 lmkd.te | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/lmkd.te b/lmkd.te
index 9af658f18..0e0dedf4c 100644
--- a/lmkd.te
+++ b/lmkd.te
@@ -1,7 +1,6 @@
 # lmkd low memory killer daemon
 type lmkd, domain;
+permissive_or_unconfined(lmkd)
 type lmkd_exec, exec_type, file_type;
 
 init_daemon_domain(lmkd)
-
-unconfined_domain(lmkd);
-- 
GitLab