kernel: allow kthreads to read and write the zpool cache

Signed-off-by: Kenton Groombridge <me@concord.sh>
2022-08-28 18:13:57 -04:00 · 2022-08-28 18:13:57 -04:00 · 047ee54a5c
commit 047ee54a5c
parent 24c3747b67
1 changed files with 4 additions and 0 deletions
--- a/policy/modules/kernel/kernel.te
+++ b/policy/modules/kernel/kernel.te
@ -493,6 +493,10 @@ optional_policy(`
 	unconfined_domain_noaudit(kernel_t)
 ')

+optional_policy(`
+	zfs_rw_zpool_cache(kernel_t)
+')
+
 ########################################
 #
 # Unlabeled process local policy