Merge pull request #13945 from ceph/wip-selinux-psched

selinux: Allow ceph daemons to read net stats Reviewed-by: Kefu Chai <kchai@redhat.com>
ceph · Mar 15, 2017 · c8fa9a4 · c8fa9a4
2 parents 6ba4858 + dfd6880
commit c8fa9a4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/selinux/ceph.te b/selinux/ceph.te
@@ -58,6 +58,7 @@ manage_files_pattern(ceph_t, ceph_var_run_t, ceph_var_run_t)
 manage_lnk_files_pattern(ceph_t, ceph_var_run_t, ceph_var_run_t)
 
 kernel_read_system_state(ceph_t)
+kernel_read_network_state(ceph_t)
 
 corenet_all_recvfrom_unlabeled(ceph_t)
 corenet_all_recvfrom_netlabel(ceph_t)