commit 3eabc1d541973f8508437a852798bd9c559017b1
author Marco Ballesio <balejs@google.com> Wed Jan 06 15:14:24 2021 -0800
committer Marco Ballesio <balejs@google.com> Tue Jan 12 10:47:58 2021 -0800
tree 8e67bc53a8759c8c87e0102493829cdfcc5d328a
parent c848de1480513e5491902f89e2ea8e464f7ab134

sepolicy: allow system_server to read /proc/locks

Access to /proc/locks is necessary to activity manager to determine
wheter a process holds a lock or not prior freezing it.

Test: verified access of /proc/locks while testing other CLs in the same
topic.
Bug: 176928302

Change-Id: I14a65da126ff26c6528edae137d3ee85d3611509

private/system_server.te

diff --git a/private/system_server.te b/private/system_server.te
index 95d7cc7..12fb3fa 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -937,6 +937,7 @@
 allow system_server {
   proc_cmdline
   proc_loadavg
+  proc_locks
   proc_meminfo
   proc_pagetypeinfo
   proc_pipe_conf