From 699dceabbfc6c53131bc29e42b7b28e3c411b683 Mon Sep 17 00:00:00 2001
From: d34d <clark@cyngn.com>
Date: Wed, 14 Sep 2016 15:15:06 -0700
Subject: [PATCH] themes: allow system_server to relabel them dir

On a fresh install the theme service broker creates the initial
theme directory which needs to be relabeled to a themeservice_app_data_File
in order for the brokered theme service to write to this directory

Change-Id: Ifd689a0c619c0e954192749b83a0cacaa945468f
TICKET: NIGHTLIES-3349
---
 sepolicy/system_server.te | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
index 39ee9356..5ae809c9 100644
--- a/sepolicy/system_server.te
+++ b/sepolicy/system_server.te
@@ -9,3 +9,7 @@ allow system_server persist_property_file:file { create_file_perms unlink };
 allow system_server storage_stub_file:dir { getattr };
 
 allow system_server media_rw_data_file:dir r_dir_perms;
+
+# Allow system_server to relabel newly created theme directory for
+# use by the proxied theme service
+allow system_server themeservice_app_data_file:dir relabelto;