| Nick Kralevich | 2b392fc | 2013-12-05 16:55:34 -0800 | [diff] [blame] | 1 | # lmkd low memory killer daemon |
| 2 | type lmkd, domain; |
| 3 | type lmkd_exec, exec_type, file_type; |
| 4 | |
| 5 | init_daemon_domain(lmkd) |
| Nick Kralevich | 5467fce | 2014-02-13 12:19:50 -0800 | [diff] [blame] | 6 | |
| Nick Kralevich | 1c73a5c | 2014-02-19 11:36:26 -0800 | [diff] [blame] | 7 | allow lmkd self:capability { dac_override sys_resource }; |
| Nick Kralevich | 5467fce | 2014-02-13 12:19:50 -0800 | [diff] [blame] | 8 | |
| 9 | ## Open and write to /proc/PID/oom_score_adj |
| 10 | ## TODO: maybe scope this down? |
| 11 | r_dir_file(lmkd, appdomain) |
| 12 | allow lmkd appdomain:file write; |
| 13 | r_dir_file(lmkd, system_server) |
| 14 | allow lmkd system_server:file write; |
| 15 | |
| 16 | ## Writes to /sys/module/lowmemorykiller/parameters/minfree |
| 17 | allow lmkd sysfs_lowmemorykiller:file w_file_perms; |