diff --git a/private/compat/26.0/26.0.cil b/private/compat/26.0/26.0.cil index 184d18d64859211fcd2e98648cecc3c6e68a70f1..9dd2ee73f6e92d6d7b71d3b9b07e884b56e8c7eb 100644 --- a/private/compat/26.0/26.0.cil +++ b/private/compat/26.0/26.0.cil @@ -479,6 +479,7 @@ proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time + proc_uid_cpupower proc_uptime proc_version proc_vmallocinfo diff --git a/private/genfs_contexts b/private/genfs_contexts index 2acaf9f723b6b77c1a955bcccdb7ad211b0243be..8f0d489ab7291d8db144f5ba06a3e2703be7d3c1 100644 --- a/private/genfs_contexts +++ b/private/genfs_contexts @@ -78,6 +78,7 @@ genfscon proc /uid_procstat/set u:object_r:proc_uid_procstat_set:s0 genfscon proc /uid_time_in_state u:object_r:proc_uid_time_in_state:s0 genfscon proc /uid_concurrent_active_time u:object_r:proc_uid_concurrent_active_time:s0 genfscon proc /uid_concurrent_policy_time u:object_r:proc_uid_concurrent_policy_time:s0 +genfscon proc /uid_cpupower/ u:object_r:proc_uid_cpupower:s0 genfscon proc /uptime u:object_r:proc_uptime:s0 genfscon proc /version u:object_r:proc_version:s0 genfscon proc /vmallocinfo u:object_r:proc_vmallocinfo:s0 diff --git a/private/system_server.te b/private/system_server.te index 6ebcab5e1acff4323e40fef554c542af35d2239a..642c8bd0eee6c7eaa5e53229788ae5578ca3e9f4 100644 --- a/private/system_server.te +++ b/private/system_server.te @@ -718,6 +718,7 @@ allow system_server { }:file r_file_perms; allow system_server proc_uid_time_in_state:dir r_dir_perms; +allow system_server proc_uid_cpupower:file r_file_perms; r_dir_file(system_server, rootfs) diff --git a/public/app.te b/public/app.te index 582995a56f32243118ad0d9bbd78736e63a0971f..3c29946c8fb616129707277c03c12c0fd4999930 100644 --- a/public/app.te +++ b/public/app.te @@ -547,3 +547,6 @@ neverallow appdomain proc_uid_concurrent_active_time:file *; # Apps cannot access proc_uid_concurrent_policy_time neverallow appdomain proc_uid_concurrent_policy_time:file *; + +# Apps cannot access proc_uid_cpupower +neverallow appdomain proc_uid_cpupower:file *; diff --git a/public/file.te b/public/file.te index fc554121e9ea689aea5f28974e91b72f1fe1cc7d..02a43608e76c111812e58fc3bcda08b4003438ee 100644 --- a/public/file.te +++ b/public/file.te @@ -56,6 +56,7 @@ type proc_uid_procstat_set, fs_type; type proc_uid_time_in_state, fs_type; type proc_uid_concurrent_active_time, fs_type; type proc_uid_concurrent_policy_time, fs_type; +type proc_uid_cpupower, fs_type; type proc_uptime, fs_type; type proc_version, fs_type; type proc_vmallocinfo, fs_type;