commit f09b2cff78b00bee93de451057ea1bd5bcf8610f
author Polina Bondarenko <pbond@google.com> Wed Feb 08 17:50:02 2017 +0100
committer Polina Bondarenko <pbond@google.com> Wed Feb 08 18:16:58 2017 +0100
tree ceb4bb16e7b7e1597144a75247d1cd8a3fc300a5
parent 89eca4095e6fb6852b9114998720677db4f51549

Thermal HAL: fixed sepolicy.

thermal hal must be able to access system temperature files and proc file.

Bug: 34260476
Test: vts, adb shell dmesg | audit2allow -p $OUT/root/sepolicy
Change-Id: I6ab713f527d5d0393b5456a351d48ed5ed10860e

sepolicy/hal_thermal.te

diff --git a/sepolicy/hal_thermal.te b/sepolicy/hal_thermal.te
new file mode 100644
index 0000000..025806a
--- /dev/null
+++ b/sepolicy/hal_thermal.te
@@ -0,0 +1,4 @@
+allow hal_thermal sysfs_thermal:dir search;
+allow hal_thermal sysfs_thermal:file { getattr open read };
+allow hal_thermal sysfs_thermal:lnk_file read;
+allow hal_thermal proc_stat:file { getattr open read };