xref: /aosp_15_r20/system/sepolicy/private/extra_free_kbytes.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute extra_free_kbytes coredomain;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(extra_free_kbytes)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Worker# Only extra_free_kbytes script is allowed to store these properties
6*e4a36f41SAndroid Build Coastguard Workerset_prop(extra_free_kbytes, init_storage_prop)
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker# required permissions to run the script from init
9*e4a36f41SAndroid Build Coastguard Workerallow extra_free_kbytes shell_exec:file rx_file_perms;
10*e4a36f41SAndroid Build Coastguard Workerallow extra_free_kbytes system_file:file x_file_perms;
11*e4a36f41SAndroid Build Coastguard Workerallow extra_free_kbytes toolbox_exec:file rx_file_perms;
12*e4a36f41SAndroid Build Coastguard Worker
13*e4a36f41SAndroid Build Coastguard Worker# files used by the script
14*e4a36f41SAndroid Build Coastguard Workerallow extra_free_kbytes proc_extra_free_kbytes:file rw_file_perms;
15*e4a36f41SAndroid Build Coastguard Workerallow extra_free_kbytes proc_watermark_scale_factor:file rw_file_perms;
16*e4a36f41SAndroid Build Coastguard Workerallow extra_free_kbytes proc_zoneinfo:file r_file_perms;
17