aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Göttsche <cgzones@googlemail.com>2024-02-22 18:00:43 +0100
committerKenton Groombridge <concord@gentoo.org>2024-03-01 12:05:48 -0500
commita1f8db5c896e3aef75922cf3ff53ccd53e00f79f (patch)
tree8997fad10dcc2a017e0ceee34eecd64fda0094f4
parentuserdom: permit reading PSI as admin (diff)
downloadhardened-refpolicy-a1f8db5c896e3aef75922cf3ff53ccd53e00f79f.tar.gz
hardened-refpolicy-a1f8db5c896e3aef75922cf3ff53ccd53e00f79f.tar.bz2
hardened-refpolicy-a1f8db5c896e3aef75922cf3ff53ccd53e00f79f.zip
fs: mark memory pressure type as file
Associate the type memory_pressure_t with the attribute file_type, so all attribute based rules apply, e.g. for unconfined_t. Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Signed-off-by: Kenton Groombridge <concord@gentoo.org>
-rw-r--r--policy/modules/kernel/filesystem.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te
index 7ffac9812..f21fc71e9 100644
--- a/policy/modules/kernel/filesystem.te
+++ b/policy/modules/kernel/filesystem.te
@@ -100,6 +100,7 @@ genfscon cgroup2 / gen_context(system_u:object_r:cgroup_t,s0)
# the rest of the cgroup tree.
type memory_pressure_t;
typeattribute memory_pressure_t cgroup_types;
+files_type(memory_pressure_t)
dev_associate_sysfs(memory_pressure_t)
type configfs_t;