From abeaa3bc92b0bf123c3c95fdd72a317d00c19e8e Mon Sep 17 00:00:00 2001
From: Wei Wang <wvw@google.com>
Date: Wed, 21 Nov 2018 07:50:33 -0800
Subject: [PATCH] Allow lmkd to renice process before killing
Bug: 118468011
Test: mem-pressure test
Change-Id: Icf387a02243af60a3bfffba912711f037669fa7f
---
public/lmkd.te | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/public/lmkd.te b/public/lmkd.te
index 0fc5d0f68..cd2370160 100644
--- a/public/lmkd.te
+++ b/public/lmkd.te
@@ -21,8 +21,8 @@ allow lmkd system_server:file write;
r_dir_file(lmkd, sysfs_lowmemorykiller)
allow lmkd sysfs_lowmemorykiller:file w_file_perms;
-# Send kill signals
-allow lmkd appdomain:process sigkill;
+# setsched and send kill signals
+allow lmkd appdomain:process { setsched sigkill };
# Clean up old cgroups
allow lmkd cgroup:dir { remove_name rmdir };
--
GitLab