Merge pull request canonical#11836 from bboozzoo/bboozzo/system-obser…

…ve-for-htop

interfaces/builtin/system-observe: extend access for htop

interfaces/builtin/system_observe.go

@@ -58,6 +58,9 @@ ptrace (read),
 @{PROC}/diskstats r,
 @{PROC}/kallsyms r,
 @{PROC}/partitions r,
+@{PROC}/pressure/cpu r,
+@{PROC}/pressure/io r,
+@{PROC}/pressure/memory r,
 @{PROC}/sys/kernel/panic r,
 @{PROC}/sys/kernel/panic_on_oops r,
 @{PROC}/sys/vm/max_map_count r,
@@ -71,6 +74,11 @@ ptrace (read),
 @{PROC}/*/{,task/*/}comm r,
 @{PROC}/*/{,task/*/}exe r,
 @{PROC}/*/{,task/*/}fdinfo/* r,
+@{PROC}/*/{,task/*/}oom_score r,
+# allow reading of smaps_rollup, which is a summary of the memory use of a process,
+# but not smaps which contains a detailed mappings breakdown like
+# /proc/self/maps, which we do not allow access to for other processes
+@{PROC}/*/{,task/*/}smaps_rollup r,
 @{PROC}/*/{,task/*/}stat r,
 @{PROC}/*/{,task/*/}statm r,
 @{PROC}/*/{,task/*/}status r,