cm: sepolicy: Allow ueventd to properly handle cpufreq changes
* We need to allow relabeling since these files can pop in and out if
the governor is changed.
Change-Id: Id75099290e24dac9962d4fed8148ec2df9e256b2
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 65e21c9..78b3ee1 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -3,6 +3,6 @@
#############################
# performance-related sysfs files (CM)
/sys/kernel/mm/ksm(/.*)? -- u:object_r:sysfs_writable:s0
-/sys/devices/system/cpu.*/cpufreq(/.*)? -- u:object_r:sysfs_writable:s0
+/sys/devices/system/cpu.*/cpufreq(/.*)? -- u:object_r:sysfs_devices_system_cpu:s0
/sys/block/mmcblk0/queue/scheduler -- u:object_r:sysfs_writable:s0
diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk
index 16a0e79..0508bf6 100644
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@@ -11,7 +11,8 @@
file_contexts \
fs_use \
genfs_contexts \
- installd.te \
seapp_contexts \
+ installd.te \
+ ueventd.te \
vold.te \
mac_permissions.xml
diff --git a/sepolicy/ueventd.te b/sepolicy/ueventd.te
new file mode 100644
index 0000000..52e1948
--- /dev/null
+++ b/sepolicy/ueventd.te
@@ -0,0 +1,5 @@
+# ueventd needs to relabel files that pop in and out of sysfs
+allow ueventd sysfs:file relabelfrom;
+
+# ueventd will set permissions on cpufreq nodes
+allow ueventd sysfs_devices_system_cpu:file setattr;