# This is required to access proc stat for fetching CPU usage allow hal_thermal_default proc_stat:file { getattr open read }; allow hal_thermal_default sysfs_thermal:dir r_dir_perms; allow hal_thermal_default sysfs_thermal:file rw_file_perms; allow hal_thermal_default proc_stat:file r_file_perms; allow hal_thermal_default self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl; # read thermal config get_prop(hal_thermal_default, vendor_thermal_prop)