diff --git a/private/genfs_contexts b/private/genfs_contexts index 3914cec7d03874d625d69d837f38ddc9370bbfd0..9f6ef5d87af3626f086a060bcd49fe2c33bad667 100644 --- a/private/genfs_contexts +++ b/private/genfs_contexts @@ -5,6 +5,7 @@ genfscon proc / u:object_r:proc:s0 genfscon proc /config.gz u:object_r:config_gz:s0 genfscon proc /interrupts u:object_r:proc_interrupts:s0 genfscon proc /iomem u:object_r:proc_iomem:s0 +genfscon proc /kmsg u:object_r:proc_kmsg:s0 genfscon proc /meminfo u:object_r:proc_meminfo:s0 genfscon proc /misc u:object_r:proc_misc:s0 genfscon proc /modules u:object_r:proc_modules:s0 diff --git a/public/file.te b/public/file.te index a525090cfd4dd299ee3f94c27babd1725a77024b..4a6feb8ddb0252ac98000bfa74d359481ce2c49f 100644 --- a/public/file.te +++ b/public/file.te @@ -15,6 +15,7 @@ type proc_bluetooth_writable, fs_type; type proc_cpuinfo, fs_type; type proc_interrupts, fs_type; type proc_iomem, fs_type; +type proc_kmsg, fs_type; type proc_meminfo, fs_type; type proc_misc, fs_type; type proc_modules, fs_type; diff --git a/public/logd.te b/public/logd.te index 62bff9739669d93285384bf45aec7bf382edb37c..c47bfd744aee89aac26ef81121ee1466224aedb2 100644 --- a/public/logd.te +++ b/public/logd.te @@ -4,7 +4,7 @@ type logd_exec, exec_type, file_type; # Read access to pseudo filesystems. r_dir_file(logd, cgroup) -r_dir_file(logd, proc) +r_dir_file(logd, proc_kmsg) r_dir_file(logd, proc_meminfo) r_dir_file(logd, proc_net)