commit: 3a34bdec305591d9452b07c29d59c61a6c365d81 Author: Dominick Grift <dac.override <AT> gmail <DOT> com> AuthorDate: Thu Dec 10 16:08:27 2015 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Thu Dec 17 15:25:22 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=3a34bdec
kernel: implement sysctl_vm_overcommit_t for /proc/sys/vm/overcommit_memory Whoever requires this type first gets to create the interfaces to operate on this object Signed-off-by: Dominick Grift <dac.override <AT> gmail.com> policy/modules/kernel/kernel.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/modules/kernel/kernel.te b/policy/modules/kernel/kernel.te index 0de538c..2625e2f 100644 --- a/policy/modules/kernel/kernel.te +++ b/policy/modules/kernel/kernel.te @@ -153,6 +153,9 @@ genfscon proc /sys/net/unix gen_context(system_u:object_r:sysctl_net_unix_t,s0) type sysctl_vm_t, sysctl_type; genfscon proc /sys/vm gen_context(system_u:object_r:sysctl_vm_t,s0) +type sysctl_vm_overcommit_t, sysctl_type; +genfscon proc /sys/vm/overcommit_memory gen_context(system_u:object_r:sysctl_vm_overcommit_t,s0) + # /proc/sys/dev directory and files type sysctl_dev_t, sysctl_type; genfscon proc /sys/dev gen_context(system_u:object_r:sysctl_dev_t,s0)
