mirror of
https://github.com/Divested-Mobile/DivestOS-Build.git
synced 2024-07-01 09:02:05 +00:00
25cc717ec2
+ 16.0: some other misc hardening patches from GrapheneOS - always restrict access to Build.SERIAL - don't grant location permission to system browsers - fbe: pad filenames more + 16.0: Contacts: remove Privacy Policy and Terms of Service links
23 lines
746 B
Diff
23 lines
746 B
Diff
From 17d64eda868006dc8c5596d27299143af8e45485 Mon Sep 17 00:00:00 2001
|
|
From: Daniel Micay <danielmicay@gmail.com>
|
|
Date: Thu, 13 Dec 2018 09:26:25 -0500
|
|
Subject: [PATCH] increase max_map_count for hardened malloc
|
|
|
|
---
|
|
rootdir/init.rc | 2 ++
|
|
1 file changed, 2 insertions(+)
|
|
|
|
diff --git a/rootdir/init.rc b/rootdir/init.rc
|
|
index b9464e7fd8..2149abe2bd 100644
|
|
--- a/rootdir/init.rc
|
|
+++ b/rootdir/init.rc
|
|
@@ -597,6 +597,8 @@ on boot
|
|
chown root system /sys/module/lowmemorykiller/parameters/minfree
|
|
chmod 0664 /sys/module/lowmemorykiller/parameters/minfree
|
|
|
|
+ write /proc/sys/vm/max_map_count 524240
|
|
+
|
|
# Tweak background writeout
|
|
write /proc/sys/vm/dirty_expire_centisecs 200
|
|
write /proc/sys/vm/dirty_background_ratio 5
|