| typeattribute device cros_dev_type; |
| |
| type audio_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| type console_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| type input_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| type kmsg_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| type logger_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| type ptmx_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| type random_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| type tpm_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| type urandom_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| type usb_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| type zero_device, dev_type, cros_dev_type, cros_labeled_dev_type; |
| |
| typeattribute null_device dev_type, cros_dev_type, cros_labeled_dev_type; |
| |
| allow chromeos_domain null_device:chr_file rw_file_perms; |
| allow chromeos_domain console_device:chr_file rw_file_perms; |
| allow chromeos_domain random_device:chr_file rw_file_perms; |
| allow chromeos_domain urandom_device:chr_file rw_file_perms; |
| allow chromeos_domain zero_device:chr_file rw_file_perms; |
| allow chromeos_domain ptmx_device:chr_file rw_file_perms; |
| |
| allow cros_labeled_dev_type device:filesystem associate; |
| |
| # TODO(fqj): cs/SetUpGraphicsSysfsContext |
| has_arc(` |
| type gpu_device, dev_type, mlstrustedobject, cros_labeled_dev_type; |
| allow gpu_device sysfs:filesystem associate; |
| '); |
| |
