From 61362840813c3a396339a7f7b5d73ca825a83748 Mon Sep 17 00:00:00 2001
From: Stephen Smalley <sds@tycho.nsa.gov>
Date: Wed, 30 Jan 2013 13:52:42 -0500
Subject: [PATCH] Permit fstat of property mapping.

Change-Id: Ie58185519252dad29a23d0d3d54b1cbafea83a83
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
---
 domain.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/domain.te b/domain.te
index 9336644af..439bde70b 100644
--- a/domain.te
+++ b/domain.te
@@ -5,7 +5,7 @@ allow domain init:process sigchld;
 
 # Read access to properties mapping.
 allow domain kernel:fd use;
-allow domain tmpfs:file read;
+allow domain tmpfs:file { read getattr };
 
 # binder adjusts the nice value during IPC.
 allow domain self:capability sys_nice;
-- 
GitLab