commit: 81f19b7610419ce24f284b9c5d1b7c410288cd6d
Author: Chris PeBenito <chpebeni <AT> linux <DOT> microsoft <DOT> com>
AuthorDate: Wed Jan 29 14:58:40 2020 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sat Feb 15 07:32:05 2020 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=81f19b76
Add perf_event access vectors.
Added in Linux v5.5.
Signed-off-by: Chris PeBenito <chpebeni <AT> linux.microsoft.com>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
policy/flask/access_vectors | 10 ++++++++++
policy/flask/security_classes | 2 ++
2 files changed, 12 insertions(+)
diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors
index 780f6409..48a3d5cd 100644
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@@ -1041,3 +1041,13 @@ class bpf
class xdp_socket
inherits socket
+
+class perf_event
+{
+ open
+ cpu
+ kernel
+ tracepoint
+ read
+ write
+}
diff --git a/policy/flask/security_classes b/policy/flask/security_classes
index dc905d58..efa1f443 100644
--- a/policy/flask/security_classes
+++ b/policy/flask/security_classes
@@ -194,4 +194,6 @@ class bpf
class xdp_socket
+class perf_event
+
# FLASK
