From d58c107591c0f99ee8003221296f998ad75d8148 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Mon, 4 Jan 2021 19:50:49 +0100
Reference: https://github.com/fedora-selinux/selinux-policy/commit/d58c107591c0f99ee8003221296f998ad75d8148
Conflict: NA
Subject: [PATCH] Allow domain stat /proc filesystem

Resolves: rhbz#1892401
---
 policy/modules/kernel/domain.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/kernel/domain.te b/policy/modules/kernel/domain.te
index c77a6fe..dff8caa 100644
--- a/policy/modules/kernel/domain.te
+++ b/policy/modules/kernel/domain.te
@@ -129,6 +129,7 @@ allow domain self:fifo_file rw_fifo_file_perms;
 allow domain self:sem create_sem_perms;
 allow domain self:shm create_shm_perms;
 
+kernel_getattr_proc(domain)
 kernel_read_proc_symlinks(domain)
 kernel_read_crypto_sysctls(domain)
 kernel_read_vm_overcommit_sysctls(domain)
-- 
1.8.3.1