# chromeos domain
type chromeos, chromeos_domain, domain, mlstrustedsubject;
net_domain(chromeos)

permissive chromeos;

domain_auto_trans(cros_init, cros_unconfined_exec, chromeos);
domain_auto_trans(cros_init_scripts, cros_unconfined_exec, chromeos);
domain_auto_trans(cros_session_manager, cros_unconfined_exec, chromeos);

r_dir_file(chromeos, sysfs);

allow kernel chromeos:process { share };
allow chromeos kernel:fd { use };

allow chromeos device:chr_file ioctl;
allow chromeos proc:file write;