Merge "sepolicy: allow dpmd to connect to system_server"
diff --git a/common/file_contexts b/common/file_contexts
index e1a6ae4..e524b77 100644
--- a/common/file_contexts
+++ b/common/file_contexts
@@ -202,6 +202,7 @@
/sys/devices/virtual/graphics/fb([0-2])+/dynamic_fps u:object_r:sysfs_graphics:s0
/sys/devices/virtual/graphics/fb([0-2])+/product_description u:object_r:sysfs_graphics:s0
/sys/devices/virtual/graphics/fb([0-2])+/vendor_name u:object_r:sysfs_graphics:s0
+/sys/devices/virtual/graphics/fb([0-2])+/hdcp/tp u:object_r:sysfs_graphics:s0
/sys/devices/virtual/hsicctl/hsicctl1[0-9]/modem_wait u:object_r:sysfs_hsic_modem_wait:s0
/sys/devices/virtual/hsicctl/hsicctl[0-9]/modem_wait u:object_r:sysfs_hsic_modem_wait:s0
/sys/devices/virtual/smdpkt/smdcntl1[0-9]/open_timeout u:object_r:sysfs_smd_open_timeout:s0
diff --git a/common/thermal-engine.te b/common/thermal-engine.te
index 2fce862..a10f9b8 100644
--- a/common/thermal-engine.te
+++ b/common/thermal-engine.te
@@ -27,3 +27,8 @@
r_dir_file(thermal-engine, sysfs_ssr);
#This is required for wake alarm access
allow thermal-engine self:capability2 wake_alarm;
+#This is required for thermal perfd access
+allow thermal-engine mpctl_socket:dir search;
+allow thermal-engine mpctl_socket:sock_file write;
+unix_socket_send(thermal-engine, mpctl, perfd)
+unix_socket_connect(thermal-engine, mpctl, perfd)
diff --git a/common/wfdservice.te b/common/wfdservice.te
index 8d51e03..89a1188 100644
--- a/common/wfdservice.te
+++ b/common/wfdservice.te
@@ -67,3 +67,7 @@
#Allow access to /data/media for dumping
allow wfdservice media_rw_data_file:dir create_dir_perms;
allow wfdservice media_rw_data_file:file create_file_perms;
+
+#allow access to sysfs to know HDMI repeater state
+allow wfdservice sysfs_graphics:file rw_file_perms;
+allow wfdservice self:netlink_kobject_uevent_socket create_socket_perms;