From c70dc4e3c745e3e63b2186b78adc96ccb71bd120 Mon Sep 17 00:00:00 2001
From: Haiqing Jiang <hqjiang1988@gmail.com>
Date: Mon, 30 Jul 2012 13:20:38 -0700
Subject: [PATCH] domain writes to cgroup pseudo filesystem
---
domain.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/domain.te b/domain.te
index 2e9720e14..9a59c49a5 100644
--- a/domain.te
+++ b/domain.te
@@ -80,7 +80,7 @@ allow domain cache_file:file { getattr read };
allow domain cache_file:lnk_file read;
# For /acct/uid/*/tasks.
-allow domain cgroup:dir search;
+allow domain cgroup:dir { search write };
allow domain cgroup:file w_file_perms;
# For /sys/qemu_trace files in the emulator.
--
GitLab