[rpms/icecream] epel8: selinux: allow icecc_scheduler_t to read /proc/meminfo

[rpms/icecream] epel8: selinux: allow icecc_scheduler_t to read /proc/meminfo

[Michal Schmidt]

            A new commit has been pushed.

            Repo   : rpms/icecream
            Branch : epel8
            Commit : d7dd36b9abf955bef2a21e242f7b814998b9e206
            Author : Michal Schmidt <mschmidt@redhat.com>
            Date   : 2014-12-12T15:51:25+01:00
            Stats  : +6/-1 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/icecream/c/d7dd36b9abf955bef2a21e242f7b814998b9e206?branch=epel8

            Log:
            selinux: allow icecc_scheduler_t to read /proc/meminfo

The wrapper is in bash, bash uses qsort during initialization,
qsort calls sysconf(_SC_PHYS_PAGES), glibc parses /proc/meminfo.
Allow it.

---
diff --git a/icecream.spec b/icecream.spec
index fbbaaa6..8f44248 100644
--- a/icecream.spec
+++ b/icecream.spec
@@ -4,7 +4,7 @@
 
 Name:		icecream
 Version:	1.0.1
-Release:	10.20140822git%{?dist}
+Release:	11.20140822git%{?dist}
 Summary:	Distributed compiler
 
 Group:		Development/Tools
@@ -255,6 +255,9 @@ exit 0
 %{_libdir}/pkgconfig/icecc.pc
 
 %changelog
+* Fri Dec 12 2014 Michal Schmidt <mschmidt@redhat.com> - 1.0.1-11.20140822git
+- selinux: allow icecc_scheduler_t to read /proc/meminfo
+
 * Fri Dec 12 2014 Michal Schmidt <mschmidt@redhat.com> - 1.0.1-10.20140822git
 - selinux: fix daemons running as unconfined_service_t
 - selinux: fix label of icecc-create-env

diff --git a/icecream.te b/icecream.te
index 97ba564..49f439f 100644
--- a/icecream.te
+++ b/icecream.te
@@ -210,3 +210,5 @@ libs_use_ld_so(icecc_scheduler_t)
 libs_use_shared_libs(icecc_scheduler_t)
 
 miscfiles_read_localization(icecc_scheduler_t)
+
+kernel_read_system_state(icecc_scheduler_t)