diff --git a/sepolicy/vendor/file.te b/sepolicy/vendor/file.te index c39d356..e72d5c0 100644 --- a/sepolicy/vendor/file.te +++ b/sepolicy/vendor/file.te @@ -1,3 +1,7 @@ # Fingerprint type vendor_fingerprint_data_file, data_file_type, file_type; type vendor_fingerprint_device, dev_type; + +# Performance +type proc_vm_dirty, fs_type, proc_type; +type proc_sched_stune, fs_type, proc_type; diff --git a/sepolicy/vendor/genfs_contexts b/sepolicy/vendor/genfs_contexts new file mode 100644 index 0000000..3131cad --- /dev/null +++ b/sepolicy/vendor/genfs_contexts @@ -0,0 +1,3 @@ +# Performance +genfscon proc /sys/vm/dirty_writeback_centisecs u:object_r:proc_vm_dirty:s0 +genfscon proc /sys/kernel/sched_stune_task_threshold u:object_r:proc_sched_stune:s0 diff --git a/sepolicy/vendor/vendor_init.te b/sepolicy/vendor/vendor_init.te index d7db4e5..ba6fe1e 100644 --- a/sepolicy/vendor/vendor_init.te +++ b/sepolicy/vendor/vendor_init.te @@ -1,3 +1,6 @@ get_prop(vendor_init, vts_status_prop) allow vendor_init nfc_data_file:dir { r_dir_perms create_dir_perms }; + +allow vendor_init proc_sched_stune:file w_file_perms; +allow vendor_init proc_vm_dirty:file w_file_perms;