diff --git a/private/genfs_contexts b/private/genfs_contexts index 09da56d41a454622de4c3141fe6f825b6e1fa1bb..b76b1457553494826f03f0e77f68c599ab28d6dd 100644 --- a/private/genfs_contexts +++ b/private/genfs_contexts @@ -68,6 +68,7 @@ genfscon proc /sys/vm/overcommit_memory u:object_r:proc_overcommit_memory:s0 genfscon proc /timer_list u:object_r:proc_timer:s0 genfscon proc /timer_stats u:object_r:proc_timer:s0 genfscon proc /tty/drivers u:object_r:proc_tty_drivers:s0 +genfscon proc /uid/ u:object_r:proc_uid_time_in_state:s0 genfscon proc /uid_cputime/show_uid_stat u:object_r:proc_uid_cputime_showstat:s0 genfscon proc /uid_cputime/remove_uid_range u:object_r:proc_uid_cputime_removeuid:s0 genfscon proc /uid_io/stats u:object_r:proc_uid_io_stats:s0 diff --git a/private/system_server.te b/private/system_server.te index 1d1b92be92b6e0db6262284f78a8dee4494e0475..65fb7dec5c2fcb228290db57a8c9daf7ae4ec980 100644 --- a/private/system_server.te +++ b/private/system_server.te @@ -698,6 +698,8 @@ allow system_server { proc_vmallocinfo }:file r_file_perms; +allow system_server proc_uid_time_in_state:dir r_dir_perms; + r_dir_file(system_server, rootfs) ### Rules needed when Light HAL runs inside system_server process.