Merge pull request #10339 from tchaikov/wip-16675

selinux: allow read /proc/<pid>/cmdline Reviewed-by: Boris Ranto <branto@redhat.com>
ceph · Jul 20, 2016 · 28819d3 · 28819d3
2 parents 0a44aaa + b05b41e
commit 28819d3
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/selinux/ceph.te b/selinux/ceph.te
@@ -75,6 +75,8 @@ corecmd_exec_shell(ceph_t)
 
 dev_read_urand(ceph_t)
 
+domain_read_all_domains_state(ceph_t)
+
 fs_getattr_all_fs(ceph_t)
 
 auth_use_nsswitch(ceph_t)