Lines Matching refs:llkd
1 # llkd Live LocK Daemon
2 typeattribute llkd coredomain;
4 init_daemon_domain(llkd)
6 get_prop(llkd, llkd_prop)
8 allow llkd self:global_capability_class_set kill;
10 allow llkd self:global_capability_class_set { sys_ptrace sys_admin };
11 allow llkd self:global_capability_class_set { dac_override dac_read_search };
14 # llkd optionally locks itself in memory, to prevent it from being
16 allow llkd self:global_capability_class_set ipc_lock;
19 allow llkd domain:process sigkill;
23 allow llkd {
29 -llkd
36 allow llkd domain:dir r_dir_perms;
37 allow llkd domain:file r_file_perms;
38 allow llkd domain:lnk_file read;
40 allow llkd proc_hung_task:file rw_file_perms;
44 allow llkd proc_sysrq:file w_file_perms;
45 allow llkd kmsg_device:chr_file w_file_perms;
49 neverallow { domain -init } llkd:process { dyntransition transition };
50 neverallow { domain userdebug_or_eng(`-crash_dump') } llkd:process ptrace;
53 neverallow * llkd:process noatsecure;