PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Make lmkd permissive or unconfined.

Browse Source 
Otherwise we'll never see denials in userdebug or eng builds and
never make progress on confining it.  Of course we cannot truly
test until it is released into AOSP, but this prepares the way
and potentially allows for internal testing and collection of denials.

Change-Id: Ic9d1ba872d43f322e39ca6cffa0e725f1e223e7b
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
This commit is contained in:
Stephen Smalley 2014-02-11 09:44:43 -05:00
parent e21871c8b7
commit 2561a9afbe
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lmkd.te
View File

@ -1,7 +1,6 @@
# lmkd low memory killer daemon # lmkd low memory killer daemon
type lmkd, domain; type lmkd, domain;
permissive_or_unconfined(lmkd)
type lmkd_exec, exec_type, file_type; type lmkd_exec, exec_type, file_type;
init_daemon_domain(lmkd) init_daemon_domain(lmkd)
unconfined_domain(lmkd);