sepolicy: allow settings to read selinux status
Change-Id: I218433da3c257a80ad4cd63230c8040292123804
diff --git a/sepolicy/system_app.te b/sepolicy/system_app.te
index 798477d..bff1e64 100644
--- a/sepolicy/system_app.te
+++ b/sepolicy/system_app.te
@@ -3,11 +3,11 @@
#
allow system_app sysfs_lowmemorykiller:file rw_file_perms;
-#allow system_app sysfs_devices_system_cpu:file rw_file_perms;
-#allow system_app sysfs_ioscheduler:file rw_file_perms;
-#allow system_app sysfs_zram:file rw_file_perms;
-#allow system_app sysfs_ksm:file rw_file_perms;
# Read /sys/kernel/debug/wakeup_sources.
allow system_app debugsfs_wakelock:file r_file_perms;
+#selinux status
+allow system_app selinuxfs:file r_file_perms;
+
+