xref: /aosp_15_r20/system/sepolicy/private/compat/33.0/33.0.compat.cil (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker;; complement CIL file for compatibility between ToT policy and 33.0 vendors.
2*e4a36f41SAndroid Build Coastguard Worker;; will be compiled along with other normal policy files, on 33.0 vendors.
3*e4a36f41SAndroid Build Coastguard Worker;;
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Worker;; This type may or may not already exist in vendor policy. The 202404 sepolicy
6*e4a36f41SAndroid Build Coastguard Worker;; (well, the 24Q1 release) added hidraw_device, but existing vendor policy
7*e4a36f41SAndroid Build Coastguard Worker;; may still label the relevant devices with the old label.
8*e4a36f41SAndroid Build Coastguard Worker(type vendor_hidraw_device)
9*e4a36f41SAndroid Build Coastguard Worker(typeattributeset dev_type (vendor_hidraw_device))
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker(allow system_server vendor_hidraw_device (dir (open getattr read search ioctl lock watch watch_reads)))
12*e4a36f41SAndroid Build Coastguard Worker(allow system_server vendor_hidraw_device (chr_file (getattr open read ioctl lock map watch watch_reads append write)))