sepolicy: Remove some denials
* Allow apps to run the "df" command to look at disk usage.
* Allow thermal engine to check/set battery limits.
Change-Id: I67c863a82a94007e7a5e8ccfde9c095b7277ab84
diff --git a/sepolicy/domain.te b/sepolicy/domain.te
new file mode 100644
index 0000000..b1fc15e
--- /dev/null
+++ b/sepolicy/domain.te
@@ -0,0 +1,5 @@
+allow domain block_device:dir { search getattr };
+allow domain block_device:blk_file getattr;
+allow domain cache_block_device:blk_file getattr;
+allow domain userdata_block_device:blk_file getattr;
+allow domain fuse_device:chr_file getattr;