commit 76c2428c5e43b5027a04248cc418b1a149a40648
author Stephen Smalley <sds@tycho.nsa.gov> Tue Jun 03 14:34:27 2014 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Tue Jun 10 09:15:10 2014 -0400
tree 63533dc0e9e7dd90af47d8af403c8712f41fb2f2
parent d4205d2bf07de5ff1f7a1d004d0c05664a183ff6

Allow system_server to read /data/misc/sensors, /data/system/sensors.

Addresses denials such as:
avc: denied { search } for comm="Binder_7" name="sensors" dev="mmcblk0p30" ino=188436 scontext=u:r:system_server:s0 tcontext=u:object_r:sensors_data_file:s0 tclass=dir

Change-Id: I27f95642337c52007379c392195295d992e0afa8
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

sepolicy/system_server.te

diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
index 356afb1..f415362 100644
--- a/sepolicy/system_server.te
+++ b/sepolicy/system_server.te
@@ -13,3 +13,7 @@
 unix_socket_send(system_server, mpdecision, mpdecision)
 allow system_server mpdecision:unix_stream_socket sendto;
 allow system_server mpdecision_socket:dir search;
+
+# Read /data/misc/sensors or /data/system/sensors.
+allow system_server sensors_data_file:dir r_dir_perms;
+allow system_server sensors_data_file:file r_file_perms;