diff options
| author | Matt Wagantall <mwagantall@cyngn.com> | 2015-11-24 12:11:11 -0800 |
|---|---|---|
| committer | Michael Bestas <mkbestas@lineageos.org> | 2018-05-20 21:57:18 +0300 |
| commit | 731dac564e0b2d5941b59313d541afcc5aef8d1d (patch) | |
| tree | 8811391c5fb33b2cfe0a193db673434752e9fca2 | |
| parent | d61e5fbc4e918d0b1d1d9c6fd1c0b1180b94c344 (diff) | |
| download | android_device_qcom_sepolicy-731dac564e0b2d5941b59313d541afcc5aef8d1d.tar.gz android_device_qcom_sepolicy-731dac564e0b2d5941b59313d541afcc5aef8d1d.tar.bz2 android_device_qcom_sepolicy-731dac564e0b2d5941b59313d541afcc5aef8d1d.zip | |
legacy: perf: allow checking for existence of other processes (signull)
Certain perfd optimizations depend on this ability.
Change-Id: Ib994cf879db73c02d8c79c8b7e6a8a855496c6be
sepolicy: perfd: fix signull permission
Commit 1a20a7fbc2 ("sepolicy: perf: allow checking for existence of
other processes (signull)") was implemented incorrectly. It granted
perfd only permissions to signull itself, not other processes. Fix
this, granting signull permissions to all processes by using the
'domain' attribute.
Change-Id: I5ea7c543ba5854550bb020382b43368d75244f32
| -rw-r--r-- | legacy-common/perfd.te | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/legacy-common/perfd.te b/legacy-common/perfd.te index 0d2bed10..67b05833 100644 --- a/legacy-common/perfd.te +++ b/legacy-common/perfd.te @@ -47,6 +47,9 @@ allow perfd mpctl_data_file:file create_file_perms; # Thermal lib access unix_socket_connect(perfd, thermal, thermal-engine) +# Allow perfd to check for existence of other processes +allow perfd domain:process signull; + # Allow perfd to set properties set_prop(perfd, freq_prop) |