blob: 004499bc129118b1707c24498d13c866e11631ba [file] [log] [blame]
# Domain for nativepowerman daemon.
type nativepowerman, domain;
type nativepowerman_exec, exec_type, file_type;
type sysfs_power_state, fs_type, sysfs_type;
allow nativepowerman power_service:service_manager add;
# Allow crash_reporter access to core dump files.
# Permit setting the sys.powerctl system property to reboot or shut down.
set_prop(nativepowerman, powerctl_prop)
# Permit writing to /sys/power/state to suspend the system.
# TODO(derat|jorgelo): Remove the larger sysfs permission once we figure out why
# just granting /sys/power/state isn't sufficient.
allow nativepowerman sysfs:file write;
allow nativepowerman sysfs_power_state:file rw_file_perms;