shared/sepolicy/vsoc_input_service.te

type vsoc_input_service, domain;
type vsoc_input_service_exec, exec_type, vendor_file_type, file_type;

init_daemon_domain(vsoc_input_service)

# I/O with /dev/uinput
allow vsoc_input_service uhid_device:chr_file rw_file_perms;

# Framebuffer I/O (needed to obtain the screen size)
allow vsoc_input_service region_screen_device:chr_file rw_file_perms;

allow vsoc_input_service input_events_device:chr_file r_file_perms;