commit 2520afc4b1360d5cff2ad93c9faf7ababe5fb6ad
author Daniel Micay <danielmicay@gmail.com> Thu Jun 02 02:05:20 2016 +0000
committer android-build-merger <android-build-merger@google.com> Thu Jun 02 02:05:20 2016 +0000
tree 7b9cb2eb35757bd7dc61627960d8de0a5885e090
parent 0bc3a333637bc2d20528ebe156d0e1e3a2dc6f6c
parent 24f9ab70c106e2766764cca2d24f72533e2cc9ab

add a property for controlling perf_event_paranoid
am: fe01f56c0d

* commit 'fe01f56c0d5c42508e1e82f5976e4c10bb00f632':
  add a property for controlling perf_event_paranoid

Change-Id: I1059ecb2c1d1aba95cd3c93f208ae7ca904cf95e

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index 00b9844..3466dce 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -603,6 +603,11 @@
 on property:sys.sysctl.tcp_def_init_rwnd=*
     write /proc/sys/net/ipv4/tcp_default_init_rwnd ${sys.sysctl.tcp_def_init_rwnd}
 
+on property:security.perf_harden=0
+    write /proc/sys/kernel/perf_event_paranoid 1
+
+on property:security.perf_harden=1
+    write /proc/sys/kernel/perf_event_paranoid 3
 
 ## Daemon processes to be run by init.
 ##