diff --git a/bootanim.te b/bootanim.te index fa0e4dca19f63f741e8da4824a733eaee9f872ca..91a50d5d1327b52811a6a03386b6cf611c607cfa 100644 --- a/bootanim.te +++ b/bootanim.te @@ -23,6 +23,7 @@ allow bootanim ion_device:chr_file rw_file_perms; # Read access to pseudo filesystems. r_dir_file(bootanim, proc) +allow bootanim proc_meminfo:file r_file_perms; r_dir_file(bootanim, sysfs) r_dir_file(bootanim, cgroup) diff --git a/domain_deprecated.te b/domain_deprecated.te index 88b62bd57fbe120ce631dec72efb863d19b2ca72..96ab2ae3785d7af445b11948b03ba09969e0916b 100644 --- a/domain_deprecated.te +++ b/domain_deprecated.te @@ -57,7 +57,7 @@ r_dir_file(domain_deprecated, proc) r_dir_file(domain_deprecated, sysfs) r_dir_file(domain_deprecated, inotify) r_dir_file(domain_deprecated, cgroup) -r_dir_file(domain_deprecated, proc_meminfo) +allow domain_deprecated proc_meminfo:file r_file_perms; r_dir_file(domain_deprecated, proc_net) # Get SELinux enforcing status.