diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if
index f35cccaff6..6abcc1be6c 100644
--- a/policy/modules/kernel/kernel.if
+++ b/policy/modules/kernel/kernel.if
@@ -1535,6 +1535,51 @@ interface(`kernel_read_network_state_symlinks',`
list_dirs_pattern($1, proc_t, proc_net_t)
')
+########################################
+##
+## Allow caller to receive pressure stall information (PSI).
+##
+##
+##
+## Domain allowed access.
+##
+##
+##
+#
+interface(`kernel_read_psi',`
+ gen_require(`
+ type proc_t, proc_psi_t;
+ ')
+
+ read_files_pattern($1, { proc_t proc_psi_t }, proc_psi_t)
+ read_lnk_files_pattern($1, { proc_t proc_psi_t }, proc_psi_t)
+ list_dirs_pattern($1, { proc_t proc_psi_t }, proc_psi_t)
+')
+
+########################################
+##
+## Allow caller to set up pressure stall information (PSI).
+##
+##
+##
+## Domain allowed access.
+##
+##
+##
+#
+interface(`kernel_rw_psi',`
+ gen_require(`
+ type proc_t, proc_psi_t;
+ ')
+
+ rw_files_pattern($1, { proc_t proc_psi_t }, proc_psi_t)
+ read_lnk_files_pattern($1, { proc_t proc_psi_t }, proc_psi_t)
+ list_dirs_pattern($1, { proc_t proc_psi_t }, proc_psi_t)
+
+ # kernel requires writers to have CAP_SYS_RESOURCE
+ allow $1 self:capability sys_resource;
+')
+
########################################
##
## Allow searching of xen state directory.
diff --git a/policy/modules/kernel/kernel.te b/policy/modules/kernel/kernel.te
index 31c5e8a2a9..586cbbeedc 100644
--- a/policy/modules/kernel/kernel.te
+++ b/policy/modules/kernel/kernel.te
@@ -109,6 +109,9 @@ genfscon proc /mdstat gen_context(system_u:object_r:proc_mdstat_t,s0)
type proc_net_t, proc_type;
genfscon proc /net gen_context(system_u:object_r:proc_net_t,s0)
+type proc_psi_t, proc_type;
+genfscon proc /pressure gen_context(system_u:object_r:proc_psi_t,s0)
+
type proc_xen_t, proc_type;
files_mountpoint(proc_xen_t)
genfscon proc /xen gen_context(system_u:object_r:proc_xen_t,s0)