seplicy: fix io scheduler sysfs access for PC
files under /dev/block are symlinks so also add
the plain failes to the context
Change-Id: I1e3fd3dbb198265e94cba014c6fad969abfc620f
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 96e15be..0723c8d 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -4,10 +4,11 @@
# performance-related sysfs files
/sys/kernel/mm/ksm(/.*)? u:object_r:sysfs_ksm:s0
-/sys/block/mmcblk0/queue/scheduler u:object_r:sysfs_ioscheduler:s0
-/sys/block/mmcblk1/queue/scheduler u:object_r:sysfs_ioscheduler:s0
-/sys/block/mmcblk2/queue/scheduler u:object_r:sysfs_ioscheduler:s0
/sys/block/zram(/.*)? u:object_r:sysfs_zram:s0
+/sys/block/mmcblk([0-2])/queue/scheduler -- u:object_r:sysfs_ioscheduler:s0
+/sys/block/mmcblk([0-2])/queue/read_ahead_kb -- u:object_r:sysfs_ioscheduler:s0
+/sys/devices/.*/queue/scheduler -- u:object_r:sysfs_ioscheduler:s0
+/sys/devices/.*/queue/read_ahead_kb -- u:object_r:sysfs_ioscheduler:s0
/system/bin/sysinit u:object_r:sysinit_exec:s0
/system/etc/init.d/90userinit u:object_r:userinit_exec:s0
diff --git a/sepolicy/init.te b/sepolicy/init.te
new file mode 100644
index 0000000..853faa2
--- /dev/null
+++ b/sepolicy/init.te
@@ -0,0 +1,6 @@
+###########################
+# OmniROM common sepolicy
+#
+
+# damn!
+allow init sysfs_ioscheduler:file rw_file_perms;
diff --git a/sepolicy/system_app.te b/sepolicy/system_app.te
index 91be6b6..7d8a42e 100644
--- a/sepolicy/system_app.te
+++ b/sepolicy/system_app.te
@@ -2,7 +2,6 @@
# OmniROM common sepolicy
#
-# performance settings
allow system_app sysfs_lowmemorykiller:file rw_file_perms;
allow system_app sysfs_devices_system_cpu:file rw_file_perms;
allow system_app sysfs_ioscheduler:file rw_file_perms;
diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
deleted file mode 100644
index 645f03e..0000000
--- a/sepolicy/system_server.te
+++ /dev/null
@@ -1,6 +0,0 @@
-###########################
-# OmniROM common sepolicy
-#
-
-allow system_server sysfs_lowmemorykiller:file rw_file_perms;
-allow system_server sysfs_devices_system_cpu:file rw_file_perms;