From 76384b3ee04e78cd6032890118984773b21bec27 Mon Sep 17 00:00:00 2001
From: Suren Baghdasaryan <surenb@google.com>
Date: Thu, 29 Mar 2018 12:30:58 -0700
Subject: [PATCH] Selinux: Give lmkd read access to /proc/meminfo
Allow lmkd read access to /proc/meminfo for retrieving information
on memory state.
Change-Id: I7cf685813a5a49893c8f9a6ac4b5f6619f3c18aa
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
---
public/lmkd.te | 3 +++
1 file changed, 3 insertions(+)
diff --git a/public/lmkd.te b/public/lmkd.te
index 5b6a7084b..472946ece 100644
--- a/public/lmkd.te
+++ b/public/lmkd.te
@@ -43,6 +43,9 @@ allow lmkd domain:file { open read };
# reboot because orderly shutdown may not be possible.
allow lmkd proc_sysrq:file rw_file_perms;
+# Read /proc/meminfo
+allow lmkd proc_meminfo:file r_file_perms;
+
### neverallow rules
# never honor LD_PRELOAD
--
GitLab