diff --git a/file.te b/file.te index a6868bf0c16687daa295e837b3d634d3f6196826..8d80e8545e8612d806ec64531e757b2bcbd69d16 100644 --- a/file.te +++ b/file.te @@ -12,6 +12,7 @@ type sysfs, fs_type, mlstrustedobject; type sysfs_writable, fs_type, sysfs_type, mlstrustedobject; type sysfs_bluetooth_writable, fs_type, sysfs_type, mlstrustedobject; type sysfs_nfc_power_writable, fs_type, sysfs_type, mlstrustedobject; +type sysfs_wake_lock, fs_type, sysfs_type; type inotify, fs_type, mlstrustedobject; type devpts, fs_type, mlstrustedobject; type tmpfs, fs_type; diff --git a/file_contexts b/file_contexts index dfdb43943723b9e28c1d2d7f09c63bce257e8ddc..be61f9ca92d98327b245374b4e0d1db78f87f953 100644 --- a/file_contexts +++ b/file_contexts @@ -204,6 +204,8 @@ /sys/devices/platform/nfc-power/nfc_power -- u:object_r:sysfs_nfc_power_writable:s0 /sys/class/rfkill/rfkill[0-9]*/state -- u:object_r:sysfs_bluetooth_writable:s0 /sys/class/rfkill/rfkill[0-9]*/type -- u:object_r:sysfs_bluetooth_writable:s0 +/sys/power/wake_lock -- u:object_r:sysfs_wake_lock:s0 +/sys/power/wake_unlock -- u:object_r:sysfs_wake_lock:s0 ############################# # asec containers /mnt/asec(/.*)? u:object_r:asec_apk_file:s0 diff --git a/rild.te b/rild.te index 1721fb1707dd32c4f8812ee5442ff8275dbb7125..a93b3aca7fc3cfcebcf79521337d149b4a0609fe 100644 --- a/rild.te +++ b/rild.te @@ -6,3 +6,6 @@ type rild_exec, exec_type, file_type; init_daemon_domain(rild) net_domain(rild) unconfined_domain(rild) + +# Access to wake locks +allow rild sysfs_wake_lock:file rw_file_perms; diff --git a/system_server.te b/system_server.te index 6e1acd3b1079ae65cfd5983b5dfde586a242bd43..fd2d13076ed083c63be84eca4789ad810512c2b0 100644 --- a/system_server.te +++ b/system_server.te @@ -45,3 +45,6 @@ allow system_server apk_tmp_file:file relabelto; allow system_server cache_backup_file:file relabelto; allow system_server apk_private_tmp_file:file relabelto; allow system_server wallpaper_file:file relabelto; + +# Access to wake locks +allow system_server sysfs_wake_lock:file rw_file_perms;