Skip to content
Snippets Groups Projects
Commit 8bdb1dab authored by Tom Cherry's avatar Tom Cherry
Browse files

Add label for /proc/sys/vm/page-cluster

Test: boot sailfish with no audit when writing to page-cluster
Change-Id: I2bfebdf9342594d66d95daaec92d71195c93ffc8
parent 71b19aa6
No related branches found
No related tags found
No related merge requests found
......@@ -455,6 +455,7 @@
proc_kmsg
proc_loadavg
proc_mounts
proc_page_cluster
proc_pagetypeinfo
proc_random
proc_swaps
......
......@@ -40,6 +40,7 @@ genfscon proc /sys/net u:object_r:proc_net:s0
genfscon proc /sys/vm/mmap_min_addr u:object_r:proc_security:s0
genfscon proc /sys/vm/mmap_rnd_bits u:object_r:proc_security:s0
genfscon proc /sys/vm/mmap_rnd_compat_bits u:object_r:proc_security:s0
genfscon proc /sys/vm/page-cluster u:object_r:proc_page_cluster:s0
genfscon proc /sys/vm/drop_caches u:object_r:proc_drop_caches:s0
genfscon proc /sys/vm/overcommit_memory u:object_r:proc_overcommit_memory:s0
genfscon proc /timer_list u:object_r:proc_timer:s0
......
......@@ -26,6 +26,7 @@ type proc_misc, fs_type;
type proc_modules, fs_type;
type proc_mounts, fs_type;
type proc_net, fs_type;
type proc_page_cluster, fs_type;
type proc_pagetypeinfo, fs_type;
type proc_perf, fs_type;
type proc_random, fs_type;
......
......@@ -277,6 +277,9 @@ allow init proc_version:file r_file_perms;
# Read /proc/cmdline
allow init proc_cmdline:file r_file_perms;
# Write to /proc/sys/vm/page-cluster
allow init proc_page_cluster:file w_file_perms;
# Reboot.
allow init self:capability sys_boot;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment