1;; complement CIL file for compatibility between ToT policy and 33.0 vendors. 2;; will be compiled along with other normal policy files, on 33.0 vendors. 3;; 4 5;; This type may or may not already exist in vendor policy. The 202404 sepolicy 6;; (well, the 24Q1 release) added hidraw_device, but existing vendor policy 7;; may still label the relevant devices with the old label. 8(type vendor_hidraw_device) 9(typeattributeset dev_type (vendor_hidraw_device)) 10 11(allow system_server vendor_hidraw_device (dir (open getattr read search ioctl lock watch watch_reads))) 12(allow system_server vendor_hidraw_device (chr_file (getattr open read ioctl lock map watch watch_reads append write)))