diff --git a/public/lmkd.te b/public/lmkd.te index f4e6c2d57091273592e66cabbcfa5f51bac20b32..208720ca61b0d8d0b91eb909dd3e2eaaf8115c34 100644 --- a/public/lmkd.te +++ b/public/lmkd.te @@ -27,6 +27,9 @@ allow lmkd appdomain:process sigkill; # Clean up old cgroups allow lmkd cgroup:dir { remove_name rmdir }; +# Allow to read memcg stats +allow lmkd cgroup:file r_file_perms; + # Set self to SCHED_FIFO allow lmkd self:capability sys_nice;