| # mmd memory management daemon |
| type mmd, domain; |
| typeattribute mmd coredomain; |
| type mmd_exec, system_file_type, exec_type, file_type; |
| |
| init_daemon_domain(mmd) |
| |
| # Set mmd.enabled_aconfig properties. |
| set_prop(mmd, mmd_prop) |
| get_prop(mmd, device_config_mmd_native_prop) |
| |
| # mmd binder setup |
| add_service(mmd, mmd_service) |
| binder_use(mmd) |
| |
| # Read /proc/swaps |
| allow mmd proc_swaps:file r_file_perms; |
| |
| # zram sysfs access |
| allow mmd sysfs_zram:dir search; |
| allow mmd sysfs_zram:file rw_file_perms; |
| |
| # procfs |
| allow mmd proc_meminfo:file r_file_perms; |
| |
| # mkswap /dev/block/zram command |
| allow mmd block_device:dir search; |
| allow mmd swap_block_device:blk_file rw_file_perms; |
| |
| # swapon syscall |
| allow mmd self:capability sys_admin; |