diff --git a/sepolicy/vendor/hal_thermal_default.te b/sepolicy/vendor/hal_thermal_default.te deleted file mode 100644 index bafcb555..00000000 --- a/sepolicy/vendor/hal_thermal_default.te +++ /dev/null @@ -1,4 +0,0 @@ -allow hal_thermal_default sysfs_thermal:dir { open read search }; -allow hal_thermal_default sysfs_thermal:file { getattr open read }; -allow hal_thermal_default sysfs_thermal:lnk_file read; -allow hal_thermal_default proc_stat:file { getattr open read }; diff --git a/sepolicy/vendor/thermal-engine.te b/sepolicy/vendor/thermal-engine.te index d92b845f..8009959d 100644 --- a/sepolicy/vendor/thermal-engine.te +++ b/sepolicy/vendor/thermal-engine.te @@ -14,8 +14,13 @@ allow thermal-engine sysfs_soc:dir search; allow thermal-engine sysfs_soc:file r_file_perms; allow thermal-engine sysfs_thermal:dir r_dir_perms; allow thermal-engine sysfs_thermal:file rw_file_perms; +allow thermal-engine sysfs_thermal:lnk_file read; allow thermal-engine sysfs_rmtfs:dir search; allow thermal-engine sysfs_rmtfs:file r_file_perms; +# to read /proc/stat +allow thermal-engine proc_stat:file { getattr open read }; +# IThermal Thermal HAL +hal_server_domain(thermal-engine, hal_thermal) allow thermal-engine thermal_device:chr_file rw_file_perms;