rosemary: sepolicy: Allow vendor_init to adjust vm and sched parameters

Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: I3854b84b8d98bc9a7098bb202cd56112742b5aaf
This commit is contained in:
bengris32
2022-08-15 20:55:55 +01:00
committed by Matsvei Niaverau
parent d0f40a9b0d
commit af2679a76c
3 changed files with 10 additions and 0 deletions

View File

@@ -1,3 +1,7 @@
# Fingerprint
type vendor_fingerprint_data_file, data_file_type, file_type;
type vendor_fingerprint_device, dev_type;
# Performance
type proc_vm_dirty, fs_type, proc_type;
type proc_sched_stune, fs_type, proc_type;

3
sepolicy/vendor/genfs_contexts vendored Normal file
View File

@@ -0,0 +1,3 @@
# Performance
genfscon proc /sys/vm/dirty_writeback_centisecs u:object_r:proc_vm_dirty:s0
genfscon proc /sys/kernel/sched_stune_task_threshold u:object_r:proc_sched_stune:s0

View File

@@ -1,3 +1,6 @@
get_prop(vendor_init, vts_status_prop)
allow vendor_init nfc_data_file:dir { r_dir_perms create_dir_perms };
allow vendor_init proc_sched_stune:file w_file_perms;
allow vendor_init proc_vm_dirty:file w_file_perms;