Skip to content
Snippets Groups Projects
Commit 368bfbac authored by android-build-team Robot's avatar android-build-team Robot
Browse files

release-request-957cd691-fb71-4770-8ff7-a3b9602655a5-for-git_oc-mr1-release-43...

release-request-957cd691-fb71-4770-8ff7-a3b9602655a5-for-git_oc-mr1-release-4314464 snap-temp-L54400000099147910

Change-Id: Ibc01371ae74f0b6fb1c2eb35b9f1a8dd6429fa1f
parents fe20a3fa 123cf237
No related branches found
No related tags found
No related merge requests found
......@@ -324,6 +324,7 @@ type vndservice_contexts_file, file_type;
# Allow files to be created in their appropriate filesystems.
allow fs_type self:filesystem associate;
allow cgroup tmpfs:filesystem associate;
allow sysfs_type sysfs:filesystem associate;
allow debugfs_type { debugfs debugfs_tracing }:filesystem associate;
allow file_type labeledfs:filesystem associate;
......
......@@ -27,6 +27,9 @@ allow lmkd appdomain:process sigkill;
# Clean up old cgroups
allow lmkd cgroup:dir { remove_name rmdir };
# Allow to read memcg stats
allow lmkd cgroup:file r_file_perms;
# Set self to SCHED_FIFO
allow lmkd self:capability sys_nice;
......
......@@ -17,6 +17,9 @@ allow mediametrics proc_meminfo:file r_file_perms;
# allows interactions with dumpsys to GMScore
allow mediametrics app_data_file:file write;
# allow access to package manager for uid->apk mapping
allow mediametrics package_native_service:service_manager find;
###
### neverallow rules
###
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment