From 31a2de9bffa6418f743d5fbefb277cb6dae36495 Mon Sep 17 00:00:00 2001
From: Ruben Brunk <rubenbrunk@google.com>
Date: Wed, 2 Mar 2016 20:18:13 -0800
Subject: [PATCH] Allow applications to read cgroup objects.

- Required to query cpusets information.

Bug: 22855417
Bug: 27381794
Bug: 27498731

Change-Id: I6d192aad2135d99a6c9cdaf97696b0822bd21897
---
 app.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app.te b/app.te
index ae3a24099..b6bbdc338 100644
--- a/app.te
+++ b/app.te
@@ -27,7 +27,7 @@ allow appdomain zygote:process sigchld;
 
 # Place process into foreground / background
 allow appdomain cgroup:dir { search write };
-allow appdomain cgroup:file w_file_perms;
+allow appdomain cgroup:file rw_file_perms;
 
 # Read /data/dalvik-cache.
 allow appdomain dalvikcache_data_file:dir { search getattr };
-- 
GitLab