Merge "property_contexts: strip blank lines and comments"
diff --git a/init.te b/init.te
index 7160466..1845fa2 100644
--- a/init.te
+++ b/init.te
@@ -324,6 +324,9 @@
# Allow init to create /data/unencrypted
allow init unencrypted_data_file:dir create_dir_perms;
+# Allow init to write to /proc/sys/vm/overcommit_memory
+allow init proc_overcommit_memory:file { write };
+
unix_socket_connect(init, vold, vold)
###
diff --git a/lmkd.te b/lmkd.te
index ee290a3..863fe07 100644
--- a/lmkd.te
+++ b/lmkd.te
@@ -20,6 +20,7 @@
allow lmkd system_server:file write;
## Writes to /sys/module/lowmemorykiller/parameters/minfree
+r_dir_file(lmkd, sysfs_type)
allow lmkd sysfs_lowmemorykiller:file w_file_perms;
# Send kill signals
diff --git a/property_contexts b/property_contexts
index d48473b..bbfea8a 100644
--- a/property_contexts
+++ b/property_contexts
@@ -43,6 +43,7 @@
persist.logd. u:object_r:logd_prop:s0
persist.logd.security u:object_r:device_logging_prop:s0
persist.logd.logpersistd u:object_r:logpersistd_logging_prop:s0
+logd.logpersistd u:object_r:logpersistd_logging_prop:s0
persist.log.tag u:object_r:logd_prop:s0
persist.mmc. u:object_r:mmc_prop:s0
persist.sys. u:object_r:system_prop:s0
diff --git a/untrusted_app.te b/untrusted_app.te
index a61384b..5e6c1b6 100644
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -31,6 +31,7 @@
# ASEC
allow untrusted_app asec_apk_file:file r_file_perms;
+allow untrusted_app asec_apk_file:dir r_dir_perms;
# Execute libs in asec containers.
allow untrusted_app asec_public_file:file { execute execmod };