Allow system_server to read /data/sensors.
Addresses denials such as:
avc: denied { getattr } for path="/data/sensors/KXTF9_Calibration.ini" dev=mmcblk0p9 ino=136818 scontext=u:r:system_server:s0 tcontext=u:object_r:sensors_data_file:s0 tclass=file
avc: denied { read } for name="AL3010_Config.ini" dev=mmcblk0p9 ino=8050 scontext=u:r:system_server:s0 tcontext=u:object_r:sensors_data_file:s0 tclass=file
avc: denied { open } for name="AL3010_Config.ini" dev=mmcblk0p9 ino=8050 scontext=u:r:system_server:s0 tcontext=u:object_r:sensors_data_file:s0 tclass=file
Change-Id: Ie5e41767fe67811743e3512c06d70d7c199f43ed
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
index 4a2fe62..c5c7a4e 100644
--- a/sepolicy/system_server.te
+++ b/sepolicy/system_server.te
@@ -4,3 +4,7 @@
# Access .gps.interface.pipe.to_gpsd.
allow system_server gps_data_file:fifo_file { setattr rw_file_perms };
+
+# Access /data/sensors.
+allow system_server sensors_data_file:dir r_dir_perms;
+allow system_server sensors_data_file:file r_file_perms;