commit a995e84c181eaef307344366e354658c8990730d
author Andrew Walbran <qwandor@google.com> Mon Mar 29 17:19:12 2021 +0000
committer Andrew Walbran <qwandor@google.com> Tue Apr 13 09:30:20 2021 +0000
tree ef5686be8fc8370835ceed19d6bd358d7c65ed9b
parent ac94a4663438bc20fb3a22b206d8cc24eb9f54e8

Add crosvm domain and give virtmanager and crosvm necessary permissions.

Bug: 183583115
Test: make TARGET_KERNEL_USE=5.4 TARGET_VIM3L=true
Change-Id: I566436fa2d27597566014f2a63198a88d6d2dbd6

private/init.te

diff --git a/private/init.te b/private/init.te
index 2627add..3315a35 100644
--- a/private/init.te
+++ b/private/init.te
@@ -89,3 +89,12 @@
 
 # Allow accessing /sys/kernel/tracing/instances/bootreceiver to set up tracing.
 allow init debugfs_bootreceiver_tracing:file w_file_perms;
+
+# chown/chmod on devices.
+allow init {
+  dev_type
+  -hw_random_device
+  -keychord_device
+  -kvm_device
+  -port_device
+}:chr_file setattr;