shell: allow reading battery info dirs in /sys
Addresses:
avc: denied { search } for comm="sh" name="bms" dev="sysfs" ino=47908
scontext=u:r:shell:s0 tcontext=u:object_r:sysfs_batteryinfo:s0
tclass=dir
Test: build
Change-Id: I8a0197417c47feefba084e9c75933d28c5f6e5f1
diff --git a/public/shell.te b/public/shell.te
index 84e76f2..4ac6638 100644
--- a/public/shell.te
+++ b/public/shell.te
@@ -142,8 +142,9 @@
allow shell self:process ptrace;
# allow shell to get battery info
-allow shell sysfs_batteryinfo:file r_file_perms;
allow shell sysfs:dir r_dir_perms;
+allow shell sysfs_batteryinfo:dir r_dir_perms;
+allow shell sysfs_batteryinfo:file r_file_perms;
# Allow access to ion memory allocation device.
allow shell ion_device:chr_file rw_file_perms;