type mi_thermald, domain;
type mi_thermald_exec, exec_type, vendor_file_type, file_type;
type thermal_data_file, data_file_type, file_type;

r_dir_file(mi_thermald, sysfs)
r_dir_file(mi_thermald, sysfs_leds)
r_dir_file(mi_thermald, sysfs_thermal)
r_dir_file(mi_thermald, vendor_sysfs_kgsl)
r_dir_file(mi_thermald, vendor_sysfs_battery_supply)
r_dir_file(mi_thermald, vendor_sysfs_qcom_battery)
r_dir_file(mi_thermald, vendor_sysfs_graphics)
r_dir_file(mi_thermald, thermal_data_file)
r_dir_file(mi_thermald, vendor_data_file)

allow mi_thermald sysfs:file w_file_perms;
allow mi_thermald sysfs_thermal:file w_file_perms;
allow mi_thermald vendor_sysfs_kgsl:file w_file_perms;
allow mi_thermald vendor_sysfs_battery_supply:file w_file_perms;
allow mi_thermald vendor_sysfs_qcom_battery:file w_file_perms;
allow mi_thermald vendor_sysfs_graphics:file w_file_perms;
allow mi_thermald thermal_data_file:file rw_file_perms;
allow mi_thermald vendor_data_file:file rw_file_perms;
allow mi_thermald vendor_data_file:dir w_dir_perms;
allow mi_thermald sysfs_devices_system_cpu:file rw_file_perms;

allow mi_thermald self:capability { fsetid sys_boot chown fowner };
allow mi_thermald self:capability2 { wake_alarm block_suspend };