diff --git a/public/lmkd.te b/public/lmkd.te index 5b6a7084bfa9839aa9f5a59b49d45feb88b74270..472946ece09291baa6b87e8afc086308a5e97e18 100644 --- a/public/lmkd.te +++ b/public/lmkd.te @@ -43,6 +43,9 @@ allow lmkd domain:file { open read }; # reboot because orderly shutdown may not be possible. allow lmkd proc_sysrq:file rw_file_perms; +# Read /proc/meminfo +allow lmkd proc_meminfo:file r_file_perms; + ### neverallow rules # never honor LD_PRELOAD