Allow fapolicyd to read all lables on /proc and /sysctls

Radovan Sroka · Radovan Sroka · commit 78c48f512103 · 2021-03-23T10:21:31.000+01:00
Signed-off-by: Radovan Sroka &lt;rsroka@redhat.com&gt;
diff --git a/fapolicyd.te b/fapolicyd.te
@@ -52,6 +52,8 @@ manage_lnk_files_pattern(fapolicyd_t, fapolicyd_var_run_t, fapolicyd_var_run_t)
 files_pid_filetrans(fapolicyd_t, fapolicyd_var_run_t, { dir file fifo_file lnk_file })
 
 kernel_dgram_send(fapolicyd_t)
+kernel_read_all_sysctls(fapolicyd_t)
+kernel_read_all_proc(fapolicyd_t)
 
 auth_read_passwd(fapolicyd_t)
 
