Merge "gce_fs_monitor can write to kernel log" into oc-gce-dev
diff --git a/shared/sepolicy/gce_fs_monitor.te b/shared/sepolicy/gce_fs_monitor.te
index 9f77691..b6633ea 100644
--- a/shared/sepolicy/gce_fs_monitor.te
+++ b/shared/sepolicy/gce_fs_monitor.te
@@ -2,3 +2,6 @@
 type gce_fs_monitor_exec, exec_type, file_type;
 
 init_daemon_domain(gce_fs_monitor)
+
+# Write to kernel log (/dev/kmsg)
+allow gce_fs_monitor kmsg_device:chr_file w_file_perms;