diff --git a/sepolicy/base/system/access_vectors b/sepolicy/base/system/access_vectors index 7c77386abf2d7d7978e7c36d6228c6d0567e9bb9..dcee4f6915ef5261896dffb1b9ea7cddbad3427c 100644 --- a/sepolicy/base/system/access_vectors +++ b/sepolicy/base/system/access_vectors @@ -565,3 +565,10 @@ class jit_memory { exec_mem_ctrl } + +class hmcap +{ + supervsable + pid_mem_read + pid_mem_write +} diff --git a/sepolicy/base/system/security_classes b/sepolicy/base/system/security_classes index 1f2147b4ae140bc483cd27573cd7ef5ad1ce60b5..19907ad3428083a4ef1c90dc3e70e3ba997b9a53 100644 --- a/sepolicy/base/system/security_classes +++ b/sepolicy/base/system/security_classes @@ -114,3 +114,4 @@ class code_sign class hmpsf class ced class jit_memory +class hmcap diff --git a/sepolicy/min/access_vectors b/sepolicy/min/access_vectors index 9cda705f7c24c556d76dc25645943f70f4ba8c44..cbff74d29803607c8dfd5fd4952e12b598474f61 100644 --- a/sepolicy/min/access_vectors +++ b/sepolicy/min/access_vectors @@ -565,3 +565,10 @@ class jit_memory { exec_mem_ctrl } + +class hmcap +{ + supervsable + pid_mem_read + pid_mem_write +} diff --git a/sepolicy/min/security_classes b/sepolicy/min/security_classes index 5c73a79ef931d8dbb2af276f02e26f3485891f58..5837e1933c28dcd9bd03f64fc4d90820fa4cfcc8 100644 --- a/sepolicy/min/security_classes +++ b/sepolicy/min/security_classes @@ -114,3 +114,4 @@ class code_sign class hmpsf class ced class jit_memory +class hmcap