From 002b4f0a4f2579e1ff96244ba3804ce0729a9810 Mon Sep 17 00:00:00 2001
From: Steve Kondik <shade@chemlab.org>
Date: Sat, 5 Apr 2014 14:05:13 -0700
Subject: [PATCH] cm: sepolicy: Allow ueventd to properly handle cpufreq
 changes

 * We need to allow relabeling since these files can pop in and out if
   the governor is changed.

Change-Id: Id75099290e24dac9962d4fed8148ec2df9e256b2
---
 sepolicy/file_contexts | 2 +-
 sepolicy/sepolicy.mk   | 3 ++-
 sepolicy/ueventd.te    | 5 +++++
 3 files changed, 8 insertions(+), 2 deletions(-)
 create mode 100644 sepolicy/ueventd.te

diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 65e21c9a..78b3ee18 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -3,6 +3,6 @@
 #############################
 # performance-related sysfs files (CM)
 /sys/kernel/mm/ksm(/.*)?       --          u:object_r:sysfs_writable:s0
-/sys/devices/system/cpu.*/cpufreq(/.*)? --  u:object_r:sysfs_writable:s0
+/sys/devices/system/cpu.*/cpufreq(/.*)? --  u:object_r:sysfs_devices_system_cpu:s0
 /sys/block/mmcblk0/queue/scheduler  --    u:object_r:sysfs_writable:s0
 
diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk
index 16a0e796..0508bf63 100644
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@@ -11,7 +11,8 @@ BOARD_SEPOLICY_UNION += \
     file_contexts \
     fs_use \
     genfs_contexts \
-    installd.te \
     seapp_contexts \
+    installd.te \
+    ueventd.te \
     vold.te \
     mac_permissions.xml
diff --git a/sepolicy/ueventd.te b/sepolicy/ueventd.te
new file mode 100644
index 00000000..52e19484
--- /dev/null
+++ b/sepolicy/ueventd.te
@@ -0,0 +1,5 @@
+# ueventd needs to relabel files that pop in and out of sysfs
+allow ueventd sysfs:file relabelfrom;
+
+# ueventd will set permissions on cpufreq nodes
+allow ueventd sysfs_devices_system_cpu:file setattr;