diff --git a/sepolicy/file.te b/sepolicy/file.te index bb06b524..6e138281 100644 --- a/sepolicy/file.te +++ b/sepolicy/file.te @@ -1,3 +1,6 @@ +# /proc +type proc_swap, fs_type; + # /sys type sysfs_als, fs_type, sysfs_type; type sysfs_block_iosched, fs_type, sysfs_type; diff --git a/sepolicy/genfs_contexts b/sepolicy/genfs_contexts new file mode 100644 index 00000000..4d11cd6e --- /dev/null +++ b/sepolicy/genfs_contexts @@ -0,0 +1 @@ +genfscon proc /sys/vm/swappiness u:object_r:proc_swap:s0 diff --git a/sepolicy/vendor_init.te b/sepolicy/vendor_init.te new file mode 100644 index 00000000..e7e70e48 --- /dev/null +++ b/sepolicy/vendor_init.te @@ -0,0 +1,2 @@ +#============= vendor_init ============== +allow vendor_init proc_swap:file write;