diff --git a/private/genfs_contexts b/private/genfs_contexts index 09da56d41a454622de4c3141fe6f825b6e1fa1bb..b76b1457553494826f03f0e77f68c599ab28d6dd 100644 --- a/private/genfs_contexts +++ b/private/genfs_contexts @@ -68,6 +68,7 @@ genfscon proc /sys/vm/overcommit_memory u:object_r:proc_overcommit_memory:s0 genfscon proc /timer_list u:object_r:proc_timer:s0 genfscon proc /timer_stats u:object_r:proc_timer:s0 genfscon proc /tty/drivers u:object_r:proc_tty_drivers:s0 +genfscon proc /uid/ u:object_r:proc_uid_time_in_state:s0 genfscon proc /uid_cputime/show_uid_stat u:object_r:proc_uid_cputime_showstat:s0 genfscon proc /uid_cputime/remove_uid_range u:object_r:proc_uid_cputime_removeuid:s0 genfscon proc /uid_io/stats u:object_r:proc_uid_io_stats:s0 diff --git a/private/system_server.te b/private/system_server.te index b56178aa227c91f30e670893a4ae2d01119e70c1..fee13be5657d90ad98f240dbefdefacdfbf1f328 100644 --- a/private/system_server.te +++ b/private/system_server.te @@ -700,6 +700,8 @@ allow system_server { proc_vmallocinfo }:file r_file_perms; +allow system_server proc_uid_time_in_state:dir r_dir_perms; + r_dir_file(system_server, rootfs) ### Rules needed when Light HAL runs inside system_server process.