diff --git a/private/app_neverallows.te b/private/app_neverallows.te index e71d565c007185a7e8ab9d937df980b7a5a80510..cf582789fa52cc7a846f634fd37e6f32a1f55484 100644 --- a/private/app_neverallows.te +++ b/private/app_neverallows.te @@ -125,6 +125,7 @@ neverallow all_untrusted_apps { proc_loadavg proc_mounts proc_pagetypeinfo + proc_slabinfo proc_stat proc_swaps proc_uptime diff --git a/private/compat/26.0/26.0.cil b/private/compat/26.0/26.0.cil index e921138a935ac89305a8c0e941973ce799903d2f..14e81456e17a04a98fe652cdc2734e7214ac8bad 100644 --- a/private/compat/26.0/26.0.cil +++ b/private/compat/26.0/26.0.cil @@ -482,6 +482,7 @@ proc_pipe_conf proc_random proc_sched + proc_slabinfo proc_swaps proc_uid_time_in_state proc_uid_concurrent_active_time diff --git a/private/compat/27.0/27.0.cil b/private/compat/27.0/27.0.cil index 41e47fc19bb22fe10953250792586f184b98e4cb..c2b3c90a1da27a2b45bf1e32bcfb96cab97dc082 100644 --- a/private/compat/27.0/27.0.cil +++ b/private/compat/27.0/27.0.cil @@ -456,7 +456,7 @@ (expandtypeattribute (preopt2cachename_exec_27_0) true) (expandtypeattribute (print_service_27_0) true) (expandtypeattribute (priv_app_27_0) true) -(expandtypeattribute (proc_27_0) true) +(typeattributeset proc_27_0 (proc proc_slabinfo)) (expandtypeattribute (proc_bluetooth_writable_27_0) true) (expandtypeattribute (proc_cpuinfo_27_0) true) (expandtypeattribute (proc_drop_caches_27_0) true) diff --git a/private/genfs_contexts b/private/genfs_contexts index 265e646c3450af28c9673d7bb0ecb4834c8651ec..afc671739c872f085233fb5d89a9d39bc5dea932 100644 --- a/private/genfs_contexts +++ b/private/genfs_contexts @@ -23,6 +23,7 @@ genfscon proc /net/xt_qtaguid/ctrl u:object_r:proc_qtaguid_ctrl:s0 genfscon proc /net/xt_qtaguid/ u:object_r:proc_qtaguid_stat:s0 genfscon proc /cpuinfo u:object_r:proc_cpuinfo:s0 genfscon proc /pagetypeinfo u:object_r:proc_pagetypeinfo:s0 +genfscon proc /slabinfo u:object_r:proc_slabinfo:s0 genfscon proc /softirqs u:object_r:proc_timer:s0 genfscon proc /stat u:object_r:proc_stat:s0 genfscon proc /swaps u:object_r:proc_swaps:s0 diff --git a/public/dumpstate.te b/public/dumpstate.te index 780e90da1ccac51c1c07152226e147bf4fe49197..2844d2e54b0abb46e21a4849db8a6b2ae7550a02 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te @@ -168,6 +168,7 @@ allow dumpstate { proc_pagetypeinfo proc_qtaguid_ctrl proc_qtaguid_stat + proc_slabinfo proc_version proc_vmallocinfo proc_vmstat diff --git a/public/file.te b/public/file.te index f525cabd08509b7beb0f17fac9662b06e9daeb79..8092fe4ec7c38dfe1db604f644b9fa7fd2bf7918 100644 --- a/public/file.te +++ b/public/file.te @@ -45,6 +45,7 @@ type proc_pid_max, fs_type, proc_type; type proc_pipe_conf, fs_type, proc_type; type proc_random, fs_type, proc_type; type proc_sched, fs_type, proc_type; +type proc_slabinfo, fs_type, proc_type; type proc_stat, fs_type, proc_type; type proc_swaps, fs_type, proc_type; type proc_sysrq, fs_type, proc_type; diff --git a/public/init.te b/public/init.te index 7700f09d67db1aeb725395540485217d2be6a620..22754a313a77ae503985ce442e703cf613e7e286 100644 --- a/public/init.te +++ b/public/init.te @@ -320,6 +320,7 @@ allow init { proc_kmsg proc_net proc_qtaguid_stat + proc_slabinfo proc_sysrq proc_qtaguid_ctrl proc_vmallocinfo diff --git a/public/shell.te b/public/shell.te index 8e6ae4cdd3af0f10890bb3c9596192438570b90e..6755f69e5244eea9850d4661affc2183ab90d44b 100644 --- a/public/shell.te +++ b/public/shell.te @@ -128,6 +128,7 @@ allow shell { proc_modules proc_pid_max proc_qtaguid_stat + proc_slabinfo proc_stat proc_timer proc_uptime