diff --git a/bootanim.te b/bootanim.te index fa0e4dca1..91a50d5d1 100644 --- a/bootanim.te +++ b/bootanim.te @@ -23,6 +23,7 @@ allow bootanim ion_device:chr_file rw_file_perms; # Read access to pseudo filesystems. r_dir_file(bootanim, proc) +allow bootanim proc_meminfo:file r_file_perms; r_dir_file(bootanim, sysfs) r_dir_file(bootanim, cgroup) diff --git a/domain_deprecated.te b/domain_deprecated.te index 4da7a3190..e5bfb1c88 100644 --- a/domain_deprecated.te +++ b/domain_deprecated.te @@ -57,7 +57,7 @@ r_dir_file(domain_deprecated, proc) r_dir_file(domain_deprecated, sysfs) r_dir_file(domain_deprecated, inotify) r_dir_file(domain_deprecated, cgroup) -r_dir_file(domain_deprecated, proc_meminfo) +allow domain_deprecated proc_meminfo:file r_file_perms; r_dir_file(domain_deprecated, proc_net) # Get SELinux enforcing status.