Browse Source

bootloader_additional: allow self process getsched

Helmut Pozimski 3 years ago
parent
commit
ff4b555b3a
1 changed files with 2 additions and 1 deletions
  1. 2 1
      bootloader_additional.te

+ 2 - 1
bootloader_additional.te

@@ -1,7 +1,8 @@
-policy_module(bootloader_additional, 0.0.1)
+policy_module(bootloader_additional, 0.0.2)
 
 require {
   type bootloader_t;
 }
 
 kernel_read_unlabeled_files(bootloader_t)
+allow bootloader_t self:process getsched;