Restore sysfs_devices_system_cpu to domain.te
am: 4e2d22451f
* commit '4e2d22451f9645f7ab39b94b1ec0f0f5a5c5b2e9':
Restore sysfs_devices_system_cpu to domain.te
diff --git a/domain.te b/domain.te
index aaf2d0a..c910c70 100644
--- a/domain.te
+++ b/domain.te
@@ -99,6 +99,9 @@
# libc references /data/misc/zoneinfo for timezone related information
r_dir_file(domain, zoneinfo_data_file)
+# Lots of processes access current CPU information
+r_dir_file(domain, sysfs_devices_system_cpu)
+
# files under /data.
allow domain system_data_file:dir { search getattr };
allow domain system_data_file:lnk_file read;
diff --git a/domain_deprecated.te b/domain_deprecated.te
index 5fbeb60..269fe5b 100644
--- a/domain_deprecated.te
+++ b/domain_deprecated.te
@@ -63,7 +63,6 @@
# Read access to pseudo filesystems.
r_dir_file(domain_deprecated, proc)
r_dir_file(domain_deprecated, sysfs)
-r_dir_file(domain_deprecated, sysfs_devices_system_cpu)
r_dir_file(domain_deprecated, inotify)
r_dir_file(domain_deprecated, cgroup)
r_dir_file(domain_deprecated, proc_net)