Adjust sepolicy for memevents with lmkd and system_server
Test: Verified memevents integration with LMKD works
Test: Verified memevents integration with AMS works
Bug: 330396528
Change-Id: Id40d427114074d23264a13ad6edbd643f39cdb14
Signed-off-by: Carlos Galo <carlosgalo@google.com>
diff --git a/private/lmkd.te b/private/lmkd.te
index 5369c79..7eb3899 100644
--- a/private/lmkd.te
+++ b/private/lmkd.te
@@ -19,9 +19,9 @@
allow lmkd fs_bpf:file read;
allow lmkd bpfloader:bpf { map_read map_write prog_run };
-# Needed for polling directly from the bpf ring buffer's fd
-allow lmkd fs_bpf_lmkd_memevents_rb:file { read write };
-allow lmkd fs_bpf_lmkd_memevents_prog:file read;
+# Needed to interact with memevents-eBPF and receive notifications for memory events
+allow lmkd fs_bpf_memevents:file { read write };
+allow lmkd fs_bpf_memevents:dir search;
allow lmkd self:global_capability_class_set { dac_override dac_read_search sys_resource kill };