android 10 system app 读取sysfs_leds avc修改

/device/qcom/sepolicy/generic/vendor/common/system_app.te

+allow system_app sysfs_leds:dir r_dir_perms;
+allow system_app sysfs_leds:file rw_file_perms;
+allow system_app sysfs_leds:lnk_file read;

device/qcom/sepolicy/generic/vendor/common/genfs_contexts

+genfscon sysfs /devices/platform/soc/4a84000.i2c/i2c-0/0-0045/leds               u:object_r:sysfs_leds:s0
+genfscon sysfs /devices/platform/soc/soc:gpio-leds/leds                          u:object_r:sysfs_leds:s

/system/sepolicy/prebuilts/api/29.0/private/coredomain.te

@@ -11,6 +11,8 @@ neverallow {
     # generic access to sysfs_type
     -ueventd
     -vold
+    -system_app
 } sysfs_leds:file *;
 ')

/system/sepolicy/private/coredomain.te

@@ -11,6 +11,8 @@ neverallow {
     # generic access to sysfs_type
     -ueventd
     -vold
+    # meig:jicong.wang add for cit
+    -system_app
 } sysfs_leds:file *;
 ')