diff --git a/shell.te b/shell.te index 887887316a2da2d47a35882399ad7f4707b1b541..e045a93435bdf3ee4646bf130a8fdbf31c2ae4dc 100644 --- a/shell.te +++ b/shell.te @@ -88,6 +88,7 @@ allow shell { service_manager_type -gatekeeper_service }:service_manager find; # allow shell to look through /proc/ for ps, top, netstat r_dir_file(shell, proc) r_dir_file(shell, proc_net) +allow shell proc_meminfo:file r_file_perms; r_dir_file(shell, cgroup) allow shell domain:dir { search open read getattr }; allow shell domain:{ file lnk_file } { open read getattr };