sepolicy: resolve 'init' and 'perfd' access violations
Allow the following:
* /proc/sys/vm/dirty_ratio to be written to from init rc scripts
* perfd the ability to kill itself
Change-Id: Iafaa79888a558dce2ddb160b94d5298f61d26e11
diff --git a/common/init.te b/common/init.te
index 6835232..9d82a94 100644
--- a/common/init.te
+++ b/common/init.te
@@ -19,3 +19,6 @@
#allow it for most domain. Do not honor LD_PRELOAD
#for lmkd
allow init { domain -lmkd }:process noatsecure;
+
+# allow setting proc_dirt_ratio fron init.rc scripts
+allow init proc_dirty_ratio:file rw_file_perms;
diff --git a/common/perfd.te b/common/perfd.te
index c74ae58..2da9e0b 100644
--- a/common/perfd.te
+++ b/common/perfd.te
@@ -3,7 +3,7 @@
init_daemon_domain(perfd)
-allow perfd self:capability { net_admin chown dac_override fsetid };
+allow perfd self:capability { net_admin chown dac_override fsetid kill };
allow perfd {
sysfs_devices_system_cpu
sysfs_cpu_online