diff --git a/private/compat/26.0/26.0.cil b/private/compat/26.0/26.0.cil index 86282d508b9eb40347bd54bc93959fd09660a346..4ebb66ee699dbd8b2faf0dd42f9c622472104dd6 100644 --- a/private/compat/26.0/26.0.cil +++ b/private/compat/26.0/26.0.cil @@ -455,6 +455,7 @@ proc_kmsg proc_loadavg proc_mounts + proc_page_cluster proc_pagetypeinfo proc_random proc_swaps diff --git a/private/genfs_contexts b/private/genfs_contexts index 124da42a3f75022d1b7f532d98875a25b9ea2dc9..a6de59a6d13f9ed25441151e688381c62b315d13 100644 --- a/private/genfs_contexts +++ b/private/genfs_contexts @@ -40,6 +40,7 @@ genfscon proc /sys/net u:object_r:proc_net:s0 genfscon proc /sys/vm/mmap_min_addr u:object_r:proc_security:s0 genfscon proc /sys/vm/mmap_rnd_bits u:object_r:proc_security:s0 genfscon proc /sys/vm/mmap_rnd_compat_bits u:object_r:proc_security:s0 +genfscon proc /sys/vm/page-cluster u:object_r:proc_page_cluster:s0 genfscon proc /sys/vm/drop_caches u:object_r:proc_drop_caches:s0 genfscon proc /sys/vm/overcommit_memory u:object_r:proc_overcommit_memory:s0 genfscon proc /timer_list u:object_r:proc_timer:s0 diff --git a/public/file.te b/public/file.te index 66ec285f4f04805bd09349b7cd3e55582d241e1c..cd0a4524f133229110f90cfdb4f5608a2e829abf 100644 --- a/public/file.te +++ b/public/file.te @@ -26,6 +26,7 @@ type proc_misc, fs_type; type proc_modules, fs_type; type proc_mounts, fs_type; type proc_net, fs_type; +type proc_page_cluster, fs_type; type proc_pagetypeinfo, fs_type; type proc_perf, fs_type; type proc_random, fs_type; diff --git a/public/init.te b/public/init.te index db2ce433de05e4d104dd610717c280c6a4944661..2d55aba162dfe9a14c29e2d72f59c65383b0abb0 100644 --- a/public/init.te +++ b/public/init.te @@ -277,6 +277,9 @@ allow init proc_version:file r_file_perms; # Read /proc/cmdline allow init proc_cmdline:file r_file_perms; +# Write to /proc/sys/vm/page-cluster +allow init proc_page_cluster:file w_file_perms; + # Reboot. allow init self:capability sys_boot;