Merge "Allow shell to read /proc."
This commit is contained in:
commit
d3205254bb
1 changed files with 4 additions and 0 deletions
4
shell.te
4
shell.te
|
@ -62,3 +62,7 @@ allow shell kernel:system syslog_read;
|
|||
|
||||
# allow shell to list services
|
||||
allow shell servicemanager:service_manager list;
|
||||
|
||||
# allow shell to look through /proc/ for ps, top
|
||||
allow shell domain:dir { search open read getattr };
|
||||
allow shell domain:{ file lnk_file } { open read getattr };
|
||||
|
|
Loading…
Reference in a new issue