Allow domain to read symlinks in /sys.
Address the following denial:
avc: denied { read } for name="battery" dev="sysfs" ino=17945 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=lnk_file permissive=0
Bug: 26219114
Change-Id: I862b40a6514bffaa455dd7f06368acf9bcdc4782
diff --git a/domain.te b/domain.te
index 98edece..fb672ad 100644
--- a/domain.te
+++ b/domain.te
@@ -96,6 +96,9 @@
allow domain system_file:file { execute read open getattr };
allow domain system_file:lnk_file read;
+# read any sysfs symlinks
+allow domain sysfs:lnk_file read;
+
# libc references /data/misc/zoneinfo for timezone related information
r_dir_file(domain, zoneinfo_data_file)