From a8e7fe2246c77ea7ef29850d2a6d046e402c46c5 Mon Sep 17 00:00:00 2001 From: dcashman <dcashman@google.com> Date: Wed, 13 Apr 2016 10:20:41 -0700 Subject: [PATCH] Allow shell to read /proc/meminfo. (Cherry-pick of internal commit: de0ce9c131beb6f71326b60533c77819b5b8c8f0) Bug: 28165026 Change-Id: I3096373d5936db6ca7a153d98e8d34d6629074d7 --- shell.te | 1 + 1 file changed, 1 insertion(+) diff --git a/shell.te b/shell.te index 887887316..e045a9343 100644 --- a/shell.te +++ b/shell.te @@ -88,6 +88,7 @@ allow shell { service_manager_type -gatekeeper_service }:service_manager find; # allow shell to look through /proc/ for ps, top, netstat r_dir_file(shell, proc) r_dir_file(shell, proc_net) +allow shell proc_meminfo:file r_file_perms; r_dir_file(shell, cgroup) allow shell domain:dir { search open read getattr }; allow shell domain:{ file lnk_file } { open read getattr }; -- GitLab