summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAmit Pundir <amit.pundir@linaro.org>2018-08-14 10:46:28 +0530
committerAmit Pundir <amit.pundir@linaro.org>2018-08-16 11:48:26 +0530
commitc627574a80a0e154752435af0c78322230cfe9df (patch)
tree24b4ec82b177f60fd5e5344596a3ec69cf8d9d55
parent382dca130f9e1b19750fb6cdbcc1752f8dede652 (diff)
downloaddragonboard410c-c627574a80a0e154752435af0c78322230cfe9df.tar.gz
sepolicy: proc: Use predefined proc_sched domain
Instead of proc:file use predefined proc_sched domain policies. Change-Id: I07e2791260b2c6fe5a380db83dd27858bb552325 Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
-rw-r--r--sepolicy/genfs_contexts2
-rw-r--r--sepolicy/init.te3
-rw-r--r--sepolicy/vendor_init.te2
3 files changed, 4 insertions, 3 deletions
diff --git a/sepolicy/genfs_contexts b/sepolicy/genfs_contexts
index 687c2cd..400a6a2 100644
--- a/sepolicy/genfs_contexts
+++ b/sepolicy/genfs_contexts
@@ -1,3 +1,5 @@
genfscon debugfs /sync u:object_r:debugfs_sync:s0
genfscon sysfs /devices/platform/soc/900000.mdss u:object_r:sysfs_mdss:s0
genfscon sysfs /devices/platform/soc/1a00000.mdss u:object_r:sysfs_mdss:s0
+genfscon proc /sys/kernel/sched_cstate_aware u:object_r:proc_sched:s0
+genfscon proc /sys/kernel/sched_sync_hint_enable u:object_r:proc_sched:s0
diff --git a/sepolicy/init.te b/sepolicy/init.te
index 0f7b542..bfe8209 100644
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -1,6 +1,3 @@
# audit2allow
# symlink /sdcard /mnt/sdcard
allow init tmpfs:lnk_file create;
-
-# access to /proc/sys/kernel/sched_cstate_aware from init.db820c.power.rc
-allow init proc:file { open write };
diff --git a/sepolicy/vendor_init.te b/sepolicy/vendor_init.te
new file mode 100644
index 0000000..32c7a93
--- /dev/null
+++ b/sepolicy/vendor_init.te
@@ -0,0 +1,2 @@
+# access to /proc/sys/kernel/sched_cstate_aware from init.db820c.power.rc
+allow vendor_init proc_sched:file write;