1##########################
2# Devices
3#
4
5# crosvm (x86) block devices
6/dev/block/pci/pci0000:00/0000:00:04\.0/by-name/misc u:object_r:misc_block_device:s0
7/dev/block/pci/pci0000:00/0000:00:04\.0/by-name/boot_[ab] u:object_r:boot_block_device:s0
8/dev/block/pci/pci0000:00/0000:00:04\.0/by-name/vendor_boot_[ab] u:object_r:boot_block_device:s0
9/dev/block/pci/pci0000:00/0000:00:04\.0/by-name/vbmeta_[ab] u:object_r:ab_block_device:s0
10/dev/block/pci/pci0000:00/0000:00:04\.0/by-name/vbmeta_system_[ab] u:object_r:ab_block_device:s0
11/dev/block/pci/pci0000:00/0000:00:04\.0/by-name/super u:object_r:super_block_device:s0
12/dev/block/pci/pci0000:00/0000:00:04\.0/by-name/userdata u:object_r:userdata_block_device:s0
13/dev/block/pci/pci0000:00/0000:00:04\.0/by-name/cache u:object_r:cache_block_device:s0
14/dev/block/pci/pci0000:00/0000:00:04\.0/by-name/metadata u:object_r:metadata_block_device:s0
15# crosvm (arm64) block devices
16/dev/block/platform/10000.pci/by-name/misc u:object_r:misc_block_device:s0
17/dev/block/platform/10000.pci/by-name/boot_[ab] u:object_r:boot_block_device:s0
18/dev/block/platform/10000.pci/by-name/vendor_boot_[ab] u:object_r:boot_block_device:s0
19/dev/block/platform/10000.pci/by-name/vbmeta_[ab] u:object_r:ab_block_device:s0
20/dev/block/platform/10000.pci/by-name/vbmeta_system_[ab] u:object_r:ab_block_device:s0
21/dev/block/platform/10000.pci/by-name/super u:object_r:super_block_device:s0
22/dev/block/platform/10000.pci/by-name/userdata u:object_r:userdata_block_device:s0
23/dev/block/platform/10000.pci/by-name/cache u:object_r:cache_block_device:s0
24/dev/block/platform/10000.pci/by-name/metadata u:object_r:metadata_block_device:s0
25# qemu block devices
26/dev/block/pci/pci0000:00/0000:00:05\.0/by-name/misc u:object_r:misc_block_device:s0
27/dev/block/pci/pci0000:00/0000:00:05\.0/by-name/boot_[ab] u:object_r:boot_block_device:s0
28/dev/block/pci/pci0000:00/0000:00:05\.0/by-name/vendor_boot_[ab] u:object_r:boot_block_device:s0
29/dev/block/pci/pci0000:00/0000:00:05\.0/by-name/vbmeta_[ab] u:object_r:ab_block_device:s0
30/dev/block/pci/pci0000:00/0000:00:05\.0/by-name/vbmeta_system_[ab] u:object_r:ab_block_device:s0
31/dev/block/pci/pci0000:00/0000:00:05\.0/by-name/super u:object_r:super_block_device:s0
32/dev/block/pci/pci0000:00/0000:00:05\.0/by-name/userdata u:object_r:userdata_block_device:s0
33/dev/block/pci/pci0000:00/0000:00:05\.0/by-name/cache u:object_r:cache_block_device:s0
34/dev/block/pci/pci0000:00/0000:00:05\.0/by-name/metadata u:object_r:metadata_block_device:s0
35# qemu (arm64) block devices
36/dev/block/platform/4010000000.pcie/by-name/misc u:object_r:misc_block_device:s0
37/dev/block/platform/4010000000.pcie/by-name/boot_[ab] u:object_r:boot_block_device:s0
38/dev/block/platform/4010000000.pcie/by-name/vendor_boot_[ab] u:object_r:boot_block_device:s0
39/dev/block/platform/4010000000.pcie/by-name/vbmeta_[ab] u:object_r:ab_block_device:s0
40/dev/block/platform/4010000000.pcie/by-name/vbmeta_system_[ab] u:object_r:ab_block_device:s0
41/dev/block/platform/4010000000.pcie/by-name/super u:object_r:super_block_device:s0
42/dev/block/platform/4010000000.pcie/by-name/userdata u:object_r:userdata_block_device:s0
43/dev/block/platform/4010000000.pcie/by-name/cache u:object_r:cache_block_device:s0
44/dev/block/platform/4010000000.pcie/by-name/metadata u:object_r:metadata_block_device:s0
45
46/dev/block/pmem0  u:object_r:rebootescrow_device:s0
47/dev/block/zram0  u:object_r:swap_block_device:s0
48/dev/dri u:object_r:gpu_device:s0
49/dev/dri/card0  u:object_r:graphics_device:s0
50/dev/dri/renderD128  u:object_r:gpu_device:s0
51/dev/hvc[0-9]*  u:object_r:serial_device:s0
52/dev/vtpmx  u:object_r:vtpm_creation_device:s0
53/dev/tpmrm0  u:object_r:tpm_resource_manager:s0
54
55#############################
56# Root files
57/initial\.metadata  u:object_r:initial_metadata_file:s0
58/ts_snap\.txt  u:object_r:tombstone_snapshot_file:s0
59
60#############################
61# data files
62/data/vendor/mediadrm(/.*)?  u:object_r:mediadrm_vendor_data_file:s0
63
64#############################
65# var files
66/var/run/system(/.*)?  u:object_r:var_run_system_file:s0
67
68#############################
69# Vendor files
70#
71/vendor/bin/socket_vsock_proxy  u:object_r:socket_vsock_proxy_exec:s0
72/vendor/bin/vtpm_manager  u:object_r:vtpm_manager_exec:s0
73/vendor/bin/vsoc_input_service  u:object_r:vsoc_input_service_exec:s0
74/vendor/bin/rename_netiface  u:object_r:rename_netiface_exec:s0
75/vendor/bin/hw/libcuttlefish-rild  u:object_r:libcuttlefish_rild_exec:s0
76/vendor/bin/hw/android\.hardware\.power\.stats@1\.0-service\.mock  u:object_r:hal_power_stats_default_exec:s0
77/vendor/bin/hw/android\.hardware\.bluetooth@1\.1-service\.sim  u:object_r:hal_bluetooth_sim_exec:s0
78/vendor/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service\.clearkey  u:object_r:hal_drm_clearkey_exec:s0
79/vendor/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service-lazy\.clearkey  u:object_r:hal_drm_clearkey_exec:s0
80/vendor/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service\.widevine  u:object_r:hal_drm_widevine_exec:s0
81/vendor/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service-lazy\.widevine  u:object_r:hal_drm_widevine_exec:s0
82/vendor/bin/hw/android\.hardware\.graphics\.allocator@3\.0-service\.minigbm   u:object_r:hal_graphics_allocator_default_exec:s0
83/vendor/bin/hw/android\.hardware\.gatekeeper@1\.0-service\.software  u:object_r:hal_gatekeeper_default_exec:s0
84/vendor/bin/hw/android\.hardware\.health\.storage@1\.0-service\.cuttlefish u:object_r:hal_health_storage_default_exec:s0
85/vendor/bin/hw/android\.hardware\.lights-service\.example u:object_r:hal_light_default_exec:s0
86/vendor/bin/hw/android\.hardware\.neuralnetworks@1\.3-service-sample-.*   u:object_r:hal_neuralnetworks_sample_exec:s0
87/vendor/bin/hw/android\.hardware\.vibrator@1\.x-service\.example u:object_r:hal_vibrator_default_exec:s0
88/vendor/bin/ip_link_add  u:object_r:ip_link_add_exec:s0
89/vendor/bin/setup_wifi  u:object_r:setup_wifi_exec:s0
90/vendor/bin/hw/android\.hardware\.sensors@2\.0-service\.mock  u:object_r:hal_sensors_default_exec:s0
91/vendor/bin/hw/android\.hardware\.input\.classifier@1\.0-service.default  u:object_r:hal_input_classifier_default_exec:s0
92/vendor/bin/hw/android\.hardware\.thermal@2\.0-service\.mock  u:object_r:hal_thermal_default_exec:s0
93/vendor/bin/hw/android\.hardware\.keymaster@4\.1-service.remote  u:object_r:hal_keymaster_remote_exec:s0
94/vendor/bin/hw/android\.hardware\.gatekeeper@1\.0-service.remote  u:object_r:hal_gatekeeper_remote_exec:s0
95/vendor/bin/hw/android\.hardware\.authsecret@1\.0-service  u:object_r:hal_authsecret_default_exec:s0
96/vendor/bin/init\.insmod\.sh  u:object_r:init_insmod_sh_exec:s0
97
98/vendor/lib(64)?/libdrm.so  u:object_r:same_process_hal_file:s0
99/vendor/lib(64)?/libglapi.so  u:object_r:same_process_hal_file:s0
100/vendor/lib(64)?/dri/.* u:object_r:same_process_hal_file:s0
101/vendor/lib(64)?/hw/android\.hardware\.graphics\.mapper@3\.0-impl\.minigbm\.so u:object_r:same_process_hal_file:s0
102/vendor/lib(64)?/hw/android\.hardware\.health@2\.0-impl-2\.1-cuttlefish\.so  u:object_r:same_process_hal_file:s0
103/vendor/lib(64)?/hw/vulkan.pastel.so  u:object_r:same_process_hal_file:s0
104/vendor/lib(64)?/libcuttlefish_fs.so  u:object_r:same_process_hal_file:s0
105/vendor/lib(64)?/vsoc_lib.so  u:object_r:same_process_hal_file:s0
106
107# gfxstream (to be better factored (fewer libraries?))
108/vendor/lib(64)?/hw/vulkan\.ranchu\.so   u:object_r:same_process_hal_file:s0
109/vendor/lib(64)?/libEGL_emulation\.so          u:object_r:same_process_hal_file:s0
110/vendor/lib(64)?/libGLESv1_CM_emulation\.so    u:object_r:same_process_hal_file:s0
111/vendor/lib(64)?/libGLESv2_emulation\.so       u:object_r:same_process_hal_file:s0
112/vendor/lib(64)?/libOpenglCodecCommon\.so       u:object_r:same_process_hal_file:s0
113/vendor/lib(64)?/libOpenglSystemCommon\.so       u:object_r:same_process_hal_file:s0
114/vendor/lib(64)?/lib_renderControl_enc\.so       u:object_r:same_process_hal_file:s0
115/vendor/lib(64)?/libGLESv1_enc\.so       u:object_r:same_process_hal_file:s0
116/vendor/lib(64)?/libGLESv2_enc\.so       u:object_r:same_process_hal_file:s0
117/vendor/lib(64)?/libvulkan_enc\.so       u:object_r:same_process_hal_file:s0
118/vendor/lib(64)?/libandroidemu\.so       u:object_r:same_process_hal_file:s0
119