diff --git a/private/genfs_contexts b/private/genfs_contexts index 3914cec7d03874d625d69d837f38ddc9370bbfd0..9f6ef5d87af3626f086a060bcd49fe2c33bad667 100644 --- a/private/genfs_contexts +++ b/private/genfs_contexts @@ -5,6 +5,7 @@ genfscon proc / u:object_r:proc:s0 genfscon proc /config.gz u:object_r:config_gz:s0 genfscon proc /interrupts u:object_r:proc_interrupts:s0 genfscon proc /iomem u:object_r:proc_iomem:s0 +genfscon proc /kmsg u:object_r:proc_kmsg:s0 genfscon proc /meminfo u:object_r:proc_meminfo:s0 genfscon proc /misc u:object_r:proc_misc:s0 genfscon proc /modules u:object_r:proc_modules:s0 diff --git a/public/file.te b/public/file.te index 8388c3b5a041d3135d3d16e1fe8b015adcd2e3be..7de1ea6c4e3792bbcbe957c06d7207f2a7e12ee8 100644 --- a/public/file.te +++ b/public/file.te @@ -15,6 +15,7 @@ type proc_bluetooth_writable, fs_type; type proc_cpuinfo, fs_type; type proc_interrupts, fs_type; type proc_iomem, fs_type; +type proc_kmsg, fs_type; type proc_meminfo, fs_type; type proc_misc, fs_type; type proc_modules, fs_type; diff --git a/public/logd.te b/public/logd.te index 62bff9739669d93285384bf45aec7bf382edb37c..c47bfd744aee89aac26ef81121ee1466224aedb2 100644 --- a/public/logd.te +++ b/public/logd.te @@ -4,7 +4,7 @@ type logd_exec, exec_type, file_type; # Read access to pseudo filesystems. r_dir_file(logd, cgroup) -r_dir_file(logd, proc) +r_dir_file(logd, proc_kmsg) r_dir_file(logd, proc_meminfo) r_dir_file(logd, proc_net)