1*e4a36f41SAndroid Build Coastguard Worker;; complement CIL file for compatibility between ToT policy and 34.0 vendors. 2*e4a36f41SAndroid Build Coastguard Worker;; will be compiled along with other normal policy files, on 34.0 vendors. 3*e4a36f41SAndroid Build Coastguard Worker;; 4*e4a36f41SAndroid Build Coastguard Worker 5*e4a36f41SAndroid Build Coastguard Worker;; This type may or may not already exist in vendor policy. The 202404 sepolicy 6*e4a36f41SAndroid Build Coastguard Worker;; (well, the 24Q1 release) added hidraw_device, but existing vendor policy 7*e4a36f41SAndroid Build Coastguard Worker;; may still label the relevant devices with the old label. 8*e4a36f41SAndroid Build Coastguard Worker;; 9*e4a36f41SAndroid Build Coastguard Worker;; Re-define it here (duplicate definitions in CIL will be ignored) - so we can 10*e4a36f41SAndroid Build Coastguard Worker;; duplicate the new policy for the old label to keep things working. 11*e4a36f41SAndroid Build Coastguard Worker;; (Doing this in 34.0.cil ended up being too messy.) 12*e4a36f41SAndroid Build Coastguard Worker;; See b/340923653. 13*e4a36f41SAndroid Build Coastguard Worker(type vendor_hidraw_device) 14*e4a36f41SAndroid Build Coastguard Worker(typeattributeset dev_type (vendor_hidraw_device)) 15*e4a36f41SAndroid Build Coastguard Worker 16*e4a36f41SAndroid Build Coastguard Worker(allow system_server vendor_hidraw_device (dir (open getattr read search ioctl lock watch watch_reads))) 17*e4a36f41SAndroid Build Coastguard Worker(allow system_server vendor_hidraw_device (chr_file (getattr open read ioctl lock map watch watch_reads append write))) 18