/device/qcom/sepolicy/generic/vendor/common/system_app.te
+allow system_app sysfs_leds:dir r_dir_perms;
+allow system_app sysfs_leds:file rw_file_perms;
+allow system_app sysfs_leds:lnk_file read;
device/qcom/sepolicy/generic/vendor/common/genfs_contexts
+genfscon sysfs /devices/platform/soc/4a84000.i2c/i2c-0/0-0045/leds u:object_r:sysfs_leds:s0
+genfscon sysfs /devices/platform/soc/soc:gpio-leds/leds u:object_r:sysfs_leds:s
/system/sepolicy/prebuilts/api/29.0/private/coredomain.te
@@ -11,6 +11,8 @@ neverallow {
# generic access to sysfs_type
-ueventd
-vold
+ -system_app
} sysfs_leds:file *;
')
/system/sepolicy/private/coredomain.te
@@ -11,6 +11,8 @@ neverallow {
# generic access to sysfs_type
-ueventd
-vold
+ # meig:jicong.wang add for cit
+ -system_app
} sysfs_leds:file *;
')