sepolicy/system_service.te

# Access devices.
allow system_server dvb_device:chr_file rw_file_perms;
allow system_server dvb_device:dir { search read open };
allow system_server uhid_device:chr_file { write open ioctl };