| type pvr, domain; | |
| type pvr_exec, exec_type, vendor_file_type, file_type; | |
| # Started by init | |
| init_daemon_domain(pvr) | |
| # allow access to /dev/dri/ | |
| allow pvr gpu_device:chr_file rw_file_perms; | |
| # allow graphics driver initialization | |
| allow pvr self:capability sys_module; | |
| allow pvr vendor_file:system module_load; | |
| # allow reading /sys/devices/soc0/machine | |
| allow pvr sysfs_socinfo:dir { r_dir_perms }; | |
| allow pvr sysfs_socinfo:file { r_file_perms }; |