Skip to content

Commit ea4c3c9

Browse files
VeronikaSyncakovazpytela
authored andcommitted
Allow go-fdo-server to read system information
The go-fdo-server daemon needs to read system information during startup: - Transparent hugepage settings in /sys for Go runtime memory optimization - Network sysctl values in /proc/sys/net for proper TCP server configuration Added interfaces: - dev_read_sysfs(go_fdo_server_t) for sysfs access - kernel_read_net_sysctls(go_fdo_server_t) for network sysctl access Resolves: RHEL-145754
1 parent 5b6cc8c commit ea4c3c9

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

policy/modules/contrib/go_fdo_server.te

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -39,8 +39,12 @@ manage_files_pattern(go_fdo_server_t, go_fdo_server_var_lib_t, go_fdo_server_var
3939
read_files_pattern(go_fdo_server_t, go_fdo_server_cert_t, go_fdo_server_cert_t)
4040
read_files_pattern(go_fdo_server_t, go_fdo_server_etc_t, go_fdo_server_etc_t)
4141

42+
#Kernel
43+
kernel_read_net_sysctls(go_fdo_server_t)
44+
4245
# Base system interfaces
4346
corenet_tcp_bind_generic_port(go_fdo_server_t)
47+
dev_read_sysfs(go_fdo_server_t)
4448
domain_use_interactive_fds(go_fdo_server_t)
4549
files_read_etc_files(go_fdo_server_t)
4650

0 commit comments

Comments
 (0)