1# Allows applications to access the GXP device, except open, 2# which is guarded by the EdgeTPU service. 3allow untrusted_app_all gxp_device:chr_file { getattr read write ioctl map }; 4