whitechapel/vendor/google/priv_app.te

# Allows privileged applications to discover the EdgeTPU service.
allow priv_app edgetpu_service:service_manager find;

# Allows privileged applications to access the EdgeTPU device, except open,
# which is guarded by the EdgeTPU service.
allow priv_app edgetpu_device:chr_file { getattr read write ioctl map };