summaryrefslogtreecommitdiff
path: root/sepolicy
diff options
context:
space:
mode:
authorStephen Smalley <sds@tycho.nsa.gov>2014-03-26 10:46:43 -0400
committerStephen Smalley <sds@tycho.nsa.gov>2014-03-26 11:01:43 -0400
commit95dda2035ffe0c5572aefe732ed9ec1da0a591ed (patch)
tree3f7308d75bd9b263ba2a6d101536acef07dbde90 /sepolicy
parentccacb9e1c592e524bf36970cb0c30f5d26fd026b (diff)
downloadmako-95dda2035ffe0c5572aefe732ed9ec1da0a591ed.tar.gz
Allow thermald to connect to mpdecision.
Addresses denials such as: avc: denied { write } for pid=1519 comm="thermal-engine-" name="mpdecision" dev="tmpfs" ino=8778 scontext=u:r:thermald:s0 tcontext=u:object_r:mpdecision_socket:s0 tclass=sock_file Change-Id: Ib8d420fe04bb2e0bca3ad4d3849ec59e9de54a91 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/thermald.te4
1 files changed, 4 insertions, 0 deletions
diff --git a/sepolicy/thermald.te b/sepolicy/thermald.te
index 201f466..e28eb19 100644
--- a/sepolicy/thermald.te
+++ b/sepolicy/thermald.te
@@ -28,3 +28,7 @@ allow thermald sysfs_devices_system_cpu:file rw_file_perms;
# /sys/devices/system/cpu/cpu1/cpufreq/cpuinfo_min_freq
# /sys/devices/system/cpu/cpu1/cpufreq/scaling_min_freq
allow thermald sysfs:file write;
+
+# Connect to mpdecision.
+allow thermald mpdecision_socket:dir r_dir_perms;
+unix_socket_connect(thermald, mpdecision, mpdecision)