Add policy for memlat governor needs create/delete perf events
[46756.223414] type=1400 audit(1637720953.624:1227238): avc: denied { cpu } for comm="cpuhp/3" scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=perf_event permissive=1 [46791.079905] type=1400 audit(1637720988.480:1228172): avc: denied { cpu } for comm="cpuhp/5" scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=perf_event permissive=1 [46831.825465] type=1400 audit(1637721029.228:1230804): avc: denied { cpu } for comm="cpuhp/4" scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=perf_event permissive=1 [47068.752724] type=1400 audit(1637721266.152:1237844): avc: denied { cpu } for comm="cpuhp/3" scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=perf_event permissive=1 [47227.488992] type=1400 audit(1637721424.888:1241154): avc: denied { cpu } for comm="cpuhp/7" scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=perf_event permissive=1 Bug: 207047575 Test: build, boot and check warning message Change-Id: I735d5cfa5eb5614114d83a7892123d37c980d531
This commit is contained in:
parent
4bb1061c2d
commit
f80cb8ae4e
1 changed files with 3 additions and 0 deletions
|
@ -4,3 +4,6 @@ allow kernel vendor_fw_file:file r_file_perms;
|
||||||
# ZRam
|
# ZRam
|
||||||
allow kernel per_boot_file:file r_file_perms;
|
allow kernel per_boot_file:file r_file_perms;
|
||||||
|
|
||||||
|
# memlat needs permision to create/delete perf events when hotplug on/off
|
||||||
|
allow kernel self:capability2 perfmon;
|
||||||
|
allow kernel self:perf_event cpu;
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue