Merge "Restrict lmkd read access from sysfs_type to sysfs_lowmemorykiller."

f58d1795 · Treehugger Robot · Gerrit Code Review · 2f6e66ff · a0748a75 · f58d1795
Commit f58d1795 authored 7 years ago by Treehugger Robot Committed by Gerrit Code Review 7 years ago
--- a/public/lmkd.te
+++ b/public/lmkd.te
@@ -18,7 +18,7 @@ r_dir_file(lmkd, system_server)
 allow lmkd system_server:file write;

 ## Writes to /sys/module/lowmemorykiller/parameters/minfree
-r_dir_file(lmkd, sysfs_type)
+r_dir_file(lmkd, sysfs_lowmemorykiller)
 allow lmkd sysfs_lowmemorykiller:file w_file_perms;

 # Send kill signals