Allow guest to run ps command on its processes by allowing it to read /proc

2010-09-25 07:07:04 -04:00 · 2010-09-25 07:07:04 -04:00 · 24ea653911
commit 24ea653911
parent fb52482a1f
1 changed files with 2 additions and 0 deletions
--- a/policy/modules/roles/guest.te
+++ b/policy/modules/roles/guest.te
@ -9,6 +9,8 @@ role guest_r;

 userdom_restricted_user_template(guest)

+kernel_read_system_state(guest_t)
+
 ########################################
 #
 # Local policy