search

fedora-selinux / selinux-policy-contrib

Fedora Policy Contributions
39 stars 66 forks source link

Update rkt policy to allow rkt_t domain to read sysfs filesystem #329

Closed zpytela closed 4 years ago

zpytela commented 4 years ago

rkt_t domain need to read size of a transparent hugepage which found in hpage_pmd_size to optimize memory allocation for rkt

Adding macro dev_read_sysfs(rkt_t) which allow to read files in sysfs_t domain

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1809000