flounder: add sepolicy for camera and power hal
Allow system_server to write to
/sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq for power hal.
Label /dev/camera.pcl as a camera device.
Change-Id: I545acfd0f5c452b9c48d724197a2492eeb08977c
diff --git a/BoardConfig.mk b/BoardConfig.mk
index 260e41e..0da397f 100644
--- a/BoardConfig.mk
+++ b/BoardConfig.mk
@@ -85,7 +85,8 @@
BOARD_SEPOLICY_DIRS := device/htc/flounder/sepolicy
BOARD_SEPOLICY_UNION := \
file_contexts \
- bluetooth.te
+ bluetooth.te \
+ system_server.te
TARGET_USES_64_BIT_BCMDHD := true
TARGET_USES_64_BIT_BINDER := true
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index d862e1c..e84a099 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -10,5 +10,7 @@
/dev/ttyTHS2 u:object_r:hci_attach_dev:s0
# nfc
/dev/bcm2079x u:object_r:nfc_device:s0
+# camera devices
+/dev/camera.pcl u:object_r:camera_device:s0
/data/nfc(/.*)? u:object_r:nfc_data_file:s0
diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
new file mode 100644
index 0000000..efe506f
--- /dev/null
+++ b/sepolicy/system_server.te
@@ -0,0 +1,2 @@
+# allow power hal to adjust max frequency
+allow system_server sysfs_devices_system_cpu:file w_file_perms;