Allow system_server to read /proc/vmstat
/proc/vmstat oom_kill counts the number of times __oom_kill_process
was actioned
(https://lore.kernel.org/lkml/149570810989.203600.9492483715840752937.stgit@buzz/)
We want to record this in the context of system_server for tracking
purposes.
Bug: 154233512
Change-Id: I27bcbcd5d839e59a1dca0e87e2f4ae107201654c
Test: build, verify vmstat can be read
diff --git a/private/system_server.te b/private/system_server.te
index 0e57739..819c78f 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -222,6 +222,9 @@
# for dumpsys meminfo
allow system_server dmabuf_heap_device:dir r_dir_perms;
+# Allow reading /proc/vmstat for the oom kill count
+allow system_server proc_vmstat:file r_file_perms;
+
# The DhcpClient and WifiWatchdog use packet_sockets
allow system_server self:packet_socket create_socket_perms_no_ioctl;