From 63f03be658cd544e483c7820f5db5a99eba8f162 Mon Sep 17 00:00:00 2001 From: bengris32 Date: Sun, 6 Aug 2023 22:17:25 +0100 Subject: [PATCH] sepolicy: basic: non_plat: Allow vendor_init to adjust dirty_writeback_centisecs Change-Id: I46b3f5c61c9f85c0774d1ded05aaf77114139fce Signed-off-by: bengris32 --- basic/non_plat/file.te | 1 + basic/non_plat/genfs_contexts | 1 + basic/non_plat/vendor_init.te | 1 + 3 files changed, 3 insertions(+) diff --git a/basic/non_plat/file.te b/basic/non_plat/file.te index e83328c..494e224 100644 --- a/basic/non_plat/file.te +++ b/basic/non_plat/file.te @@ -43,6 +43,7 @@ type proc_gpu_memory, fs_type, proc_type; type proc_mtk_es_reg_dump, fs_type, proc_type; type proc_ccci_dump, fs_type, proc_type; type proc_log_much, fs_type, proc_type; +type proc_vm_dirty, fs_type, proc_type; #For icusb type proc_icusb, fs_type, proc_type; diff --git a/basic/non_plat/genfs_contexts b/basic/non_plat/genfs_contexts index a7598c3..66ba2e1 100644 --- a/basic/non_plat/genfs_contexts +++ b/basic/non_plat/genfs_contexts @@ -44,6 +44,7 @@ genfscon proc /mtk_cmdq_debug/status u:object_r:proc_cmdq_debug:s0 genfscon proc /mtk_cmdq_debug/record u:object_r:proc_cmdq_debug:s0 genfscon proc /cpuhvfs/dbg_repo u:object_r:proc_dbg_repo:s0 genfscon proc /sys/kernel/panic_on_rcu_stall u:object_r:proc_panic_on_rcu_stall:s0 +genfscon proc /sys/vm/dirty_writeback_centisecs u:object_r:proc_vm_dirty:s0 # Purpose dump not exit file genfscon proc /isp_p2/isp_p2_dump u:object_r:proc_isp_p2_dump:s0 diff --git a/basic/non_plat/vendor_init.te b/basic/non_plat/vendor_init.te index d8dcb08..12e61ab 100644 --- a/basic/non_plat/vendor_init.te +++ b/basic/non_plat/vendor_init.te @@ -15,6 +15,7 @@ allow vendor_init proc_cpufreq:file w_file_perms; allow vendor_init proc_bootprof:file w_file_perms; allow vendor_init proc_pl_lk:file w_file_perms; allow vendor_init proc_mtprintk:file w_file_perms; +allow vendor_init proc_vm_dirty:file w_file_perms; allow vendor_init rootfs:dir create_dir_perms; allow vendor_init self:capability sys_module; allow vendor_init tmpfs:dir create_dir_perms;