Gitiles
Code Review Sign In
gerrit.omnirom.org / android_system_sepolicy / 96da70eb4f92dcf38b28e4a9854de5b222bb84e6
commit96da70eb4f92dcf38b28e4a9854de5b222bb84e6[log] [tgz]
authorPhilip Cuadra <philipcuadra@google.com>Mon May 02 11:04:39 2016 -0700
committerPhilip Cuadra <philipcuadra@google.com>Wed May 04 17:39:41 2016 -0700
tree6efee342d3a1cf334a06b4a9985603bbd3a35614
parent81b7675e8cfcc84561f6f702059ee7caebe1c6b6 [diff]
Add CAP_IPC_LOCK and pinner to system_server

Add pinner service to system_service services.
Add CAP_IPC_LOCK permissions to system_server in order to allow
system_server to pin more memory than the lockedmem ulimit.

bug 28251566

Change-Id: I990c73d25fce4f2cc9a2db0015aa238fa7b0e984
3 files changed
tree: 6efee342d3a1cf334a06b4a9985603bbd3a35614
  1. tools/
  2. access_vectors
  3. adbd.te
  4. Android.mk
  5. app.te
  6. atrace.te
  7. attributes
  8. audioserver.te
  9. autoplay_app.te
  10. binderservicedomain.te
  11. blkid.te
  12. blkid_untrusted.te
  13. bluetooth.te
  14. bluetoothdomain.te
  15. boot_control_hal.te
  16. bootanim.te
  17. bootstat.te
  18. cameraserver.te
  19. clatd.te
  20. CleanSpec.mk
  21. debuggerd.te
  22. device.te
  23. dex2oat.te
  24. dhcp.te
  25. dnsmasq.te
  26. domain.te
  27. domain_deprecated.te
  28. drmserver.te
  29. dumpstate.te
  30. file.te
  31. file_contexts
  32. file_contexts_asan
  33. fingerprintd.te
  34. fs_use
  35. fsck.te
  36. fsck_untrusted.te
  37. gatekeeperd.te
  38. genfs_contexts
  39. global_macros
  40. gpsd.te
  41. hci_attach.te
  42. healthd.te
  43. hostapd.te
  44. idmap.te
  45. init.te
  46. initial_sid_contexts
  47. initial_sids
  48. inputflinger.te
  49. install_recovery.te
  50. installd.te
  51. ioctl_defines
  52. ioctl_macros
  53. isolated_app.te
  54. kernel.te
  55. keys.conf
  56. keystore.te
  57. lmkd.te
  58. logd.te
  59. mac_permissions.xml
  60. mdnsd.te
  61. mediacodec.te
  62. mediadrmserver.te
  63. mediaextractor.te
  64. mediaserver.te
  65. mls
  66. mls_macros
  67. MODULE_LICENSE_PUBLIC_DOMAIN
  68. mtp.te
  69. net.te
  70. netd.te
  71. neverallow_macros
  72. nfc.te
  73. NOTICE
  74. otapreopt_chroot.te
  75. perfprofd.te
  76. platform_app.te
  77. policy_capabilities
  78. port_contexts
  79. postinstall.te
  80. postinstall_dexopt.te
  81. ppp.te
  82. priv_app.te
  83. profman.te
  84. property.te
  85. property_contexts
  86. racoon.te
  87. radio.te
  88. README
  89. recovery.te
  90. recovery_persist.te
  91. recovery_refresh.te
  92. rild.te
  93. roles
  94. runas.te
  95. sdcardd.te
  96. seapp_contexts
  97. security_classes
  98. service.te
  99. service_contexts
  100. servicemanager.te
  101. sgdisk.te
  102. shared_relro.te
  103. shell.te
  104. slideshow.te
  105. su.te
  106. surfaceflinger.te
  107. system_app.te
  108. system_server.te
  109. te_macros
  110. tee.te
  111. toolbox.te
  112. tzdatacheck.te
  113. ueventd.te
  114. uncrypt.te
  115. untrusted_app.te
  116. update_engine.te
  117. update_verifier.te
  118. users
  119. vdc.te
  120. vold.te
  121. watchdogd.te
  122. wpa.te
  123. zygote.te