1type thermal-engine, domain;
2type thermal-engine_exec, exec_type, vendor_file_type, file_type;
3
4init_daemon_domain(thermal-engine)
5
6allow thermal-engine self:capability2 block_suspend;
7
8# to read /sys/devices
9allow thermal-engine sysfs:dir r_dir_perms;
10
11allow thermal-engine sysfs_msm_subsys:dir r_dir_perms;
12allow thermal-engine sysfs_msm_subsys:file rw_file_perms;
13allow thermal-engine sysfs_soc:dir search;
14allow thermal-engine sysfs_soc:file r_file_perms;
15allow thermal-engine sysfs_thermal:dir r_dir_perms;
16allow thermal-engine sysfs_thermal:file rw_file_perms;
17allow thermal-engine sysfs_rmtfs:dir search;
18allow thermal-engine sysfs_rmtfs:file r_file_perms;
19
20allow thermal-engine audio_device:chr_file rw_file_perms;
21
22r_dir_file(thermal-engine, sysfs_leds)
23r_dir_file(thermal-engine, sysfs_msm_subsys)
24r_dir_file(thermal-engine, sysfs_uio)
25r_dir_file(thermal-engine, sysfs_batteryinfo)
26
27allow thermal-engine self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
28
29allow thermal-engine self:socket create_socket_perms;
30allowxperm thermal-engine self:socket ioctl msm_sock_ipc_ioctls;
31
32# reboot/shutdown for thermal limits exceeded
33set_prop(thermal-engine, powerctl_prop)
34
35allow thermal-engine self:capability2 wake_alarm;
36
37dontaudit thermal-engine kernel:system module_request;
38