replicant-vendor_replicant/sepolicy/system_app.te

# For performance settings
allow system_app sysfs_devices_system_cpu:file rw_file_perms;
allow system_app sysfs_devices_system_iosched:file rw_file_perms;

# For the updaters
allow system_app recovery_cache_file:dir create_dir_perms;
allow system_app recovery_cache_file:file create_file_perms;
allow system_app media_rw_data_file:dir create_dir_perms;
allow system_app media_rw_data_file:file create_file_perms;
cm: sepolicy: fix performance settings Change-Id: Idea17856b4aef9258688a3ad58d0e5cac6d805a6 2015-01-03 05:44:43 +00:00			`# For performance settings`
			`allow system_app sysfs_devices_system_cpu:file rw_file_perms;`
sepolicy: new label for io scheduler sysfs nodes * needed for io scheduler in performance settings Change-Id: I818340ed62e3e1dd2674b93340b31723c7a985f4 2015-01-05 23:56:19 +00:00			`allow system_app sysfs_devices_system_iosched:file rw_file_perms;`
sepolicy: Split off /cache/recovery's permissions /cache/recovery is used by 2 domains: recovery and updater apps. Separate its perms from the rest of /cache and grant them to those 2 clients Change-Id: Iacde60744c07423f9876c2f8e3da900543e38ddf 2015-02-05 22:33:47 +00:00
			`# For the updaters`
sepolicy: Allow system apps to write cache and media files Updaters need to be able to read and write to these locations. Change-Id: I928a5f73ec29ab4fecb717072532d449192f3ca9 2015-02-18 01:36:37 +00:00			`allow system_app recovery_cache_file:dir create_dir_perms;`
			`allow system_app recovery_cache_file:file create_file_perms;`
			`allow system_app media_rw_data_file:dir create_dir_perms;`
			`allow system_app media_rw_data_file:file create_file_perms;`