blob: d8b65f9a8a848ffefc184d47234bb9d0f22203ea [file] [log] [blame]
type init-power-sh, domain;
type init-power-sh_exec, exec_type, file_type;
init_daemon_domain(init-power-sh)
allow init-power-sh shell_exec:file r_file_perms;
allow init-power-sh sysfs_devices_system_cpu:file w_file_perms;
allow init-power-sh sysfs_performance:dir r_dir_perms;
allow init-power-sh sysfs_performance:file w_file_perms;
allow init-power-sh sysfs_thermal:dir r_dir_perms;
allow init-power-sh sysfs_thermal:file rw_file_perms;
allow init-power-sh proc_kernel_sched:file w_file_perms;
# allow labeling of interactive /sys files created post-initial restorecon
allow init-power-sh sysfs:{ dir file lnk_file } relabelfrom;
allow init-power-sh sysfs_devices_system_cpu:{ dir file lnk_file } relabelto;
# allow writes to sysfs files that have not yet been labeled
allow init-power-sh sysfs:file rw_file_perms;