Skip to content
Snippets Groups Projects
Commit ac3c61eb authored by Connor O'Brien's avatar Connor O'Brien
Browse files

selinux: set proc_uid_time_in_state type for /proc/uid


/proc/uid/ provides the same per-uid time_in_state data as
/proc/uid_time_in_state, so apply the same type and let system_server
read directories of this type.

Bug: 66953705
Test: system_server can read /proc/uid/*/time_in_state files without
denials on sailfish
Change-Id: Iab7fd018c5296e8c0140be81c14e5bae9e0acb0b
Signed-off-by: default avatarConnor O'Brien <connoro@google.com>
parent 4ebbe461
No related branches found
No related tags found
No related merge requests found
......@@ -68,6 +68,7 @@ genfscon proc /sys/vm/overcommit_memory u:object_r:proc_overcommit_memory:s0
genfscon proc /timer_list u:object_r:proc_timer:s0
genfscon proc /timer_stats u:object_r:proc_timer:s0
genfscon proc /tty/drivers u:object_r:proc_tty_drivers:s0
genfscon proc /uid/ u:object_r:proc_uid_time_in_state:s0
genfscon proc /uid_cputime/show_uid_stat u:object_r:proc_uid_cputime_showstat:s0
genfscon proc /uid_cputime/remove_uid_range u:object_r:proc_uid_cputime_removeuid:s0
genfscon proc /uid_io/stats u:object_r:proc_uid_io_stats:s0
......
......@@ -698,6 +698,8 @@ allow system_server {
proc_vmallocinfo
}:file r_file_perms;
allow system_server proc_uid_time_in_state:dir r_dir_perms;
r_dir_file(system_server, rootfs)
### Rules needed when Light HAL runs inside system_server process.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment