Allow thermald to connect to mpdecision.
Addresses denials such as:
avc: denied { write } for pid=1519 comm="thermal-engine-" name="mpdecision" dev="tmpfs" ino=8778 scontext=u:r:thermald:s0 tcontext=u:object_r:mpdecision_socket:s0 tclass=sock_file
Change-Id: Ib8d420fe04bb2e0bca3ad4d3849ec59e9de54a91
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
diff --git a/sepolicy/thermald.te b/sepolicy/thermald.te
index 45704e6..a8fcc66 100644
--- a/sepolicy/thermald.te
+++ b/sepolicy/thermald.te
@@ -40,5 +40,6 @@
allow thermald socket_device:dir w_dir_perms;
allow thermald thermald_socket:sock_file create_file_perms;
-# Search access to /dev/socket/mpdecision/
+# Connect to mpdecision.
allow thermald mpdecision_socket:dir r_dir_perms;
+unix_socket_connect(thermald, mpdecision, mpdecision)
