sepolicy/system.te

allow system_server wallpaper_file:file relabelto;
allow system_server dalvikcache_data_file:file write;

# allow adb related properties to be set
allow system_server adbtcp_prop:property_service set;

allow system_server dhcp_data_file:dir r_dir_perms;
allow system_server dhcp_data_file:file r_file_perms;

# System server dynamically loads some dexfiles
allow system_server dex2oat_exec:file rx_file_perms;