nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #625 from rmsc/main 

kubernetes: allow kubelet to read /proc/sys/vm files.
This commit is contained in:
Chris PeBenito 2023-07-05 11:07:24 -04:00 committed by GitHub
parent d4e64bb956 34cba22df8
commit 4370d6bcdf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/services/kubernetes.te
View File

@ -273,6 +273,7 @@ kernel_read_irq_sysctls(kubelet_t)
kernel_read_network_state(kubelet_t)
kernel_read_system_state(kubelet_t)
kernel_read_state(kubelet_t)
kernel_read_vm_sysctls(kubelet_t)
kernel_rw_kernel_sysctl(kubelet_t)
kernel_rw_net_sysctls(kubelet_t)
kernel_rw_vm_overcommit_sysctl(kubelet_t)