common/system_server.te

#============= system_server ==============
# allow system_server to communicate with cnd process over cnd_socket
unix_socket_connect(system_server, cnd, cnd)
# allow  system/framework applications to update the cnd configuration files
allow system_server cnd_data_file:dir { read open write getattr add_name };
allow system_server cnd_data_file:file { create write getattr setattr read lock open };

# allow system_server to communicate with sensors daemon over sensors_socket
allow system_server sensors:unix_stream_socket connectto;
allow system_server sensors_socket:sock_file write;