commit c8ed855edec0bf11cfcb6a713fd988e6d00dccc9
author Suren Baghdasaryan <surenb@google.com> Tue Jul 24 17:04:18 2018 -0700
committer Jeffrey Vander Stoep <jeffv@google.com> Fri Aug 10 20:05:46 2018 +0000
tree b438a74b90b158f2a109c8950d6a02fdbdcd64d3
parent 3dd465a0977852c2989e21e4fe0e9539d704a535

Selinux: Allow lmkd write access to sys.lmk. properties

Allow lmkd write access to sys.lmk. properties to be able to set
sys.lmk.minfree_levels.

Bug: 111521182
Test: getprop sys.lmk.minfree_levels returns value set by lmkd
Change-Id: I86ff11d75917966857d3a76876a56799bb92a5ad
Signed-off-by: Suren Baghdasaryan <surenb@google.com>

private/compat/26.0/26.0.ignore.cil

diff --git a/private/compat/26.0/26.0.ignore.cil b/private/compat/26.0/26.0.ignore.cil
index 7e04f07..96b3b07 100644
--- a/private/compat/26.0/26.0.ignore.cil
+++ b/private/compat/26.0/26.0.ignore.cil
@@ -111,6 +111,7 @@
     storaged_data_file
     sysfs_fs_ext4_features
     system_boot_reason_prop
+    system_lmk_prop
     system_net_netd_hwservice
     system_update_service
     test_boot_reason_prop

private/compat/27.0/27.0.ignore.cil

diff --git a/private/compat/27.0/27.0.ignore.cil b/private/compat/27.0/27.0.ignore.cil
index 6e4147e..2772cd7 100644
--- a/private/compat/27.0/27.0.ignore.cil
+++ b/private/compat/27.0/27.0.ignore.cil
@@ -97,6 +97,7 @@
     statsdw_socket
     storaged_data_file
     system_boot_reason_prop
+    system_lmk_prop
     system_update_service
     test_boot_reason_prop
     time_prop

private/compat/28.0/28.0.ignore.cil

diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil
index a8f6fec..91ef8df 100644
--- a/private/compat/28.0/28.0.ignore.cil
+++ b/private/compat/28.0/28.0.ignore.cil
@@ -11,6 +11,7 @@
     llkd_tmpfs
     mnt_product_file
     overlayfs_file
+    system_lmk_prop
     time_prop
     timedetector_service
     timezonedetector_service

private/property_contexts

diff --git a/private/property_contexts b/private/property_contexts
index 37d4427..2726d84 100644
--- a/private/property_contexts
+++ b/private/property_contexts
@@ -73,6 +73,7 @@
 sys.boot.reason.last    u:object_r:last_boot_reason_prop:s0
 pm.                     u:object_r:pm_prop:s0
 test.sys.boot.reason    u:object_r:test_boot_reason_prop:s0
+sys.lmk.                u:object_r:system_lmk_prop:s0
 
 # Boolean property set by system server upon boot indicating
 # if device owner is provisioned.