| # Domain for nativepowerman daemon. |
| type nativepowerman, domain; |
| type nativepowerman_exec, exec_type, file_type; |
| type sysfs_power_state, fs_type, sysfs_type; |
| |
| brillo_domain(nativepowerman) |
| allow nativepowerman power_service:service_manager add; |
| wakelock_use(nativepowerman) |
| |
| # Allow crash_reporter access to core dump files. |
| allow_crash_reporter(nativepowerman) |
| |
| # Permit setting the sys.powerctl system property to reboot or shut down. |
| set_prop(nativepowerman, powerctl_prop) |
| |
| # Permit writing to /sys/power/state to suspend the system. |
| # TODO(derat|jorgelo): Remove the larger sysfs permission once we figure out why |
| # just granting /sys/power/state isn't sufficient. |
| allow nativepowerman sysfs:file write; |
| allow nativepowerman sysfs_power_state:file rw_file_perms; |
