Skip to content

Commit c514a53

Browse files
committed
Revert "fix(NODE-1498): allow read access to more hardware info for node_exporter (#2121)"
This reverts commit 2ce147d.
1 parent 372b9a5 commit c514a53

File tree

1 file changed

+0
-9
lines changed

1 file changed

+0
-9
lines changed

ic-os/components/selinux/node_exporter/node_exporter.te

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -115,12 +115,3 @@ require {
115115
type user_runtime_root_t;
116116
}
117117
allow node_exporter_t user_runtime_root_t:dir { search };
118-
119-
# Allow reading udev state data from /run/udev/data
120-
udev_read_runtime_files(node_exporter_t)
121-
122-
# Allow reading /proc/pressure
123-
kernel_read_psi(node_exporter_t)
124-
125-
# Allow reading under mount points with mnt_t
126-
files_list_mnt(node_exporter_t)

0 commit comments

Comments
 (0)