sepolicy: Resolve denials from setting swappiness

Change-Id: I20c6e2b60ce3a7802992aa7dca767efbd7480f6f
AdrianDC · Aug 18, 2020 · 768fef1 · 768fef1
1 parent 4c7ff80
commit 768fef1
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/sepolicy/file.te b/sepolicy/file.te
@@ -1,3 +1,6 @@
+# /proc
+type proc_swap, fs_type;
+
 # /sys
 type sysfs_als, fs_type, sysfs_type;
 type sysfs_block_iosched, fs_type, sysfs_type;

diff --git a/sepolicy/genfs_contexts b/sepolicy/genfs_contexts
@@ -0,0 +1 @@
+genfscon proc /sys/vm/swappiness                      u:object_r:proc_swap:s0
diff --git a/sepolicy/vendor_init.te b/sepolicy/vendor_init.te
@@ -0,0 +1,2 @@
+#============= vendor_init ==============
+allow vendor_init proc_swap:file write;
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		genfscon proc /sys/vm/swappiness u:object_r:proc_swap:s0
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		#============= vendor_init ==============
		allow vendor_init proc_swap:file write;