diff options
author | Stephen Smalley <sds@tycho.nsa.gov> | 2014-03-26 10:46:43 -0400 |
---|---|---|
committer | Stephen Smalley <sds@tycho.nsa.gov> | 2014-03-26 11:01:43 -0400 |
commit | 95dda2035ffe0c5572aefe732ed9ec1da0a591ed (patch) | |
tree | 3f7308d75bd9b263ba2a6d101536acef07dbde90 /sepolicy | |
parent | ccacb9e1c592e524bf36970cb0c30f5d26fd026b (diff) | |
download | mako-95dda2035ffe0c5572aefe732ed9ec1da0a591ed.tar.gz |
Allow thermald to connect to mpdecision.
Addresses denials such as:
avc: denied { write } for pid=1519 comm="thermal-engine-" name="mpdecision" dev="tmpfs" ino=8778 scontext=u:r:thermald:s0 tcontext=u:object_r:mpdecision_socket:s0 tclass=sock_file
Change-Id: Ib8d420fe04bb2e0bca3ad4d3849ec59e9de54a91
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'sepolicy')
-rw-r--r-- | sepolicy/thermald.te | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sepolicy/thermald.te b/sepolicy/thermald.te index 201f466..e28eb19 100644 --- a/sepolicy/thermald.te +++ b/sepolicy/thermald.te @@ -28,3 +28,7 @@ allow thermald sysfs_devices_system_cpu:file rw_file_perms; # /sys/devices/system/cpu/cpu1/cpufreq/cpuinfo_min_freq # /sys/devices/system/cpu/cpu1/cpufreq/scaling_min_freq allow thermald sysfs:file write; + +# Connect to mpdecision. +allow thermald mpdecision_socket:dir r_dir_perms; +unix_socket_connect(thermald, mpdecision, mpdecision) |