Allow init-thermal-symlinks-sh to read thermal_link_device
ln calls stat to check if the destination is a directory.
Grant the getattr permission for it.
Bug: 173529842
Test: Check the denials during boot
Change-Id: I9785eef44410d87e8f052c2adcf362989c703d6e
diff --git a/thermal/init-thermal-symlinks.sh.te b/thermal/init-thermal-symlinks.sh.te
index 3da9763..b46605c 100644
--- a/thermal/init-thermal-symlinks.sh.te
+++ b/thermal/init-thermal-symlinks.sh.te
@@ -4,7 +4,7 @@
init_daemon_domain(init-thermal-symlinks-sh)
allow init-thermal-symlinks-sh vendor_toolbox_exec:file rx_file_perms;
-allow init-thermal-symlinks-sh thermal_link_device:dir w_dir_perms;
+allow init-thermal-symlinks-sh thermal_link_device:dir rw_dir_perms;
allow init-thermal-symlinks-sh thermal_link_device:lnk_file create_file_perms;
allow init-thermal-symlinks-sh sysfs_thermal:dir r_dir_perms;
allow init-thermal-symlinks-sh sysfs_thermal:file r_file_perms;