commit 564188962b5bceab22dd9917d30d2dfd9fb33b31
author Stephen Smalley <sds@tycho.nsa.gov> Fri Mar 21 11:43:25 2014 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Mon Mar 24 16:46:30 2014 +0000
tree 11a38b86b06f8552fc1a1594f6eb6fe27a31f3e1
parent 36a8980fe72e05e531e251bae2c70b4e5fb226db

Fix mode on sysfs file to avoid need for thermald dac_override.

/sys/class/leds/lcd-backlight/brightness has system owner/group
and is only owner-writable which triggers CAP_DAC_OVERRIDE check
when thermald tries to write to it.  Fix by chmod 664 to make
it writable by group system, which thermald already has in its
group set.

Before the change:
-rw-r--r-- system   system            u:object_r:sysfs:s0 brightness

After the change:
-rw-rw-r-- system   system            u:object_r:sysfs:s0 brightness

The policy for thermald is left unchanged by this change; we can
continue to watch for further dac_override granted messages until
we are sure there are no further cases.

Change-Id: Ic9372d9c5cefeefbf3d2369e95b65f265df85a02
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

init.hammerhead.rc

diff --git a/init.hammerhead.rc b/init.hammerhead.rc
index 5797c8d..4507661 100644
--- a/init.hammerhead.rc
+++ b/init.hammerhead.rc
@@ -132,6 +132,7 @@
     chown system system /sys/class/leds/green/on_off_ms
     chown system system /sys/class/leds/blue/on_off_ms
     chown system system /sys/class/leds/red/rgb_start
+    chmod 664 /sys/class/leds/lcd-backlight/brightness
 
 on post-fs-data
     mkdir /data/media 0770 media_rw media_rw