sepolicy: Remove some denials
* Allow apps to run the "df" command to look at disk usage.
* Allow thermal engine to check/set battery limits.
Change-Id: I67c863a82a94007e7a5e8ccfde9c095b7277ab84
diff --git a/sepolicy/qcom/thermal-engine.te b/sepolicy/qcom/thermal-engine.te
index e616275..8f8967e 100644
--- a/sepolicy/qcom/thermal-engine.te
+++ b/sepolicy/qcom/thermal-engine.te
@@ -1,4 +1,7 @@
allow thermal-engine self:netlink_kobject_uevent_socket create_socket_perms;
r_dir_file(thermal-engine, sysfs_rqstats);
+allow thermal-engine sysfs_battery_supply:file rw_file_perms;
+allow thermal-engine sysfs_battery_supply:dir r_dir_perms;
+
allow thermal-engine self:capability { net_admin } ;