commit e48ab7848dac5fecfe64fcabeef786156eeae261
author Jeffrey Vander Stoep <jeffv@google.com> Thu Jan 28 15:34:06 2016 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Jan 28 15:34:06 2016 +0000
tree 366e32584ff63e21ec5a58cadbc7e0bccdb19bb2
parent 0e591bd256233add2c06c306bc17f5ebd71fe088
parent bc2b76b06bc34d1f02e1a9d1a8a6a22bc3da5f04

Merge "kernel: grant perms from domain_deprecated"

kernel.te

diff --git a/kernel.te b/kernel.te
index 05838af..67edc10 100644
--- a/kernel.te
+++ b/kernel.te
@@ -3,6 +3,15 @@
 
 allow kernel self:capability sys_nice;
 
+# Root fs.
+allow kernel rootfs:dir r_dir_perms;
+allow kernel rootfs:file r_file_perms;
+allow kernel rootfs:lnk_file r_file_perms;
+
+# Get SELinux enforcing status.
+allow kernel selinuxfs:dir r_dir_perms;
+allow kernel selinuxfs:file r_file_perms;
+
 # Allow init relabel itself.
 allow kernel rootfs:file relabelfrom;
 allow kernel init_exec:file relabelto;