diff --git a/private/app_neverallows.te b/private/app_neverallows.te index e71d565c007185a7e8ab9d937df980b7a5a80510..cf582789fa52cc7a846f634fd37e6f32a1f55484 100644 --- a/private/app_neverallows.te +++ b/private/app_neverallows.te @@ -125,6 +125,7 @@ neverallow all_untrusted_apps { proc_loadavg proc_mounts proc_pagetypeinfo + proc_slabinfo proc_stat proc_swaps proc_uptime diff --git a/private/compat/26.0/26.0.cil b/private/compat/26.0/26.0.cil index de83c8169430746ff9edacb76440a3b505850e23..4699ecf4372a70710a1470c4bab145ab9e2d3f59 100644 --- a/private/compat/26.0/26.0.cil +++ b/private/compat/26.0/26.0.cil @@ -481,6 +481,7 @@ proc_pipe_conf proc_random proc_sched + proc_slabinfo proc_swaps proc_uid_time_in_state proc_uid_concurrent_active_time diff --git a/private/compat/27.0/27.0.cil b/private/compat/27.0/27.0.cil index b19f3d405cbe5e8796042b6cc99230508327a0db..e5d50e472faa2511282a389f8146c18133b515c6 100644 --- a/private/compat/27.0/27.0.cil +++ b/private/compat/27.0/27.0.cil @@ -456,7 +456,7 @@ (expandtypeattribute (preopt2cachename_exec_27_0) true) (expandtypeattribute (print_service_27_0) true) (expandtypeattribute (priv_app_27_0) true) -(expandtypeattribute (proc_27_0) true) +(typeattributeset proc_27_0 (proc proc_slabinfo)) (expandtypeattribute (proc_bluetooth_writable_27_0) true) (expandtypeattribute (proc_cpuinfo_27_0) true) (expandtypeattribute (proc_drop_caches_27_0) true) diff --git a/private/genfs_contexts b/private/genfs_contexts index 265e646c3450af28c9673d7bb0ecb4834c8651ec..afc671739c872f085233fb5d89a9d39bc5dea932 100644 --- a/private/genfs_contexts +++ b/private/genfs_contexts @@ -23,6 +23,7 @@ genfscon proc /net/xt_qtaguid/ctrl u:object_r:proc_qtaguid_ctrl:s0 genfscon proc /net/xt_qtaguid/ u:object_r:proc_qtaguid_stat:s0 genfscon proc /cpuinfo u:object_r:proc_cpuinfo:s0 genfscon proc /pagetypeinfo u:object_r:proc_pagetypeinfo:s0 +genfscon proc /slabinfo u:object_r:proc_slabinfo:s0 genfscon proc /softirqs u:object_r:proc_timer:s0 genfscon proc /stat u:object_r:proc_stat:s0 genfscon proc /swaps u:object_r:proc_swaps:s0 diff --git a/public/dumpstate.te b/public/dumpstate.te index f6c7507302f040f884968f2ef4b0166af9c20ae9..412418ab18f33c0a7190cd108c74432783934de8 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te @@ -167,6 +167,7 @@ allow dumpstate { proc_pagetypeinfo proc_qtaguid_ctrl proc_qtaguid_stat + proc_slabinfo proc_version proc_vmallocinfo proc_vmstat diff --git a/public/file.te b/public/file.te index 8c33bedb9120cdfa9250694f6e9000ecb78dbc25..68ce321707aeeff74eef8dbc2488928d8cfa600a 100644 --- a/public/file.te +++ b/public/file.te @@ -45,6 +45,7 @@ type proc_pid_max, fs_type, proc_type; type proc_pipe_conf, fs_type, proc_type; type proc_random, fs_type, proc_type; type proc_sched, fs_type, proc_type; +type proc_slabinfo, fs_type, proc_type; type proc_stat, fs_type, proc_type; type proc_swaps, fs_type, proc_type; type proc_sysrq, fs_type, proc_type; diff --git a/public/init.te b/public/init.te index 2519311dbf5d920bb17abfbd31c2f59149d50155..e37f1ce5e299bc9ddafd4ddadfe056c79b2c9ece 100644 --- a/public/init.te +++ b/public/init.te @@ -320,6 +320,7 @@ allow init { proc_kmsg proc_net proc_qtaguid_stat + proc_slabinfo proc_sysrq proc_qtaguid_ctrl proc_vmallocinfo diff --git a/public/shell.te b/public/shell.te index 8e6ae4cdd3af0f10890bb3c9596192438570b90e..6755f69e5244eea9850d4661affc2183ab90d44b 100644 --- a/public/shell.te +++ b/public/shell.te @@ -128,6 +128,7 @@ allow shell { proc_modules proc_pid_max proc_qtaguid_stat + proc_slabinfo proc_stat proc_timer proc_uptime