diff --git a/whitechapel/vendor/google/edgetpu_logging.te b/whitechapel/vendor/google/edgetpu_logging.te index 021338f4..ab67126f 100644 --- a/whitechapel/vendor/google/edgetpu_logging.te +++ b/whitechapel/vendor/google/edgetpu_logging.te @@ -4,3 +4,7 @@ init_daemon_domain(edgetpu_logging) # The logging service accesses /dev/abrolhos allow edgetpu_logging edgetpu_device:chr_file rw_file_perms; + +# Allows the logging service to access /sys/class/edgetpu +allow edgetpu_logging sysfs_edgetpu:dir search; +allow edgetpu_logging sysfs_edgetpu:file r_file_perms; diff --git a/whitechapel/vendor/google/genfs_contexts b/whitechapel/vendor/google/genfs_contexts index 8d63ee7f..a1755adc 100644 --- a/whitechapel/vendor/google/genfs_contexts +++ b/whitechapel/vendor/google/genfs_contexts @@ -97,7 +97,8 @@ genfscon proc /fts_ext/driver_test genfscon sysfs /devices/virtual/sec/tsp u:object_r:sysfs_touch:s0 # EdgeTPU -genfscon sysfs /class/edgetpu u:object_r:sysfs_edgetpu:s0 +genfscon sysfs /devices/platform/1ce00000.abrolhos u:object_r:sysfs_edgetpu:s0 +genfscon sysfs /devices/platform/abrolhos u:object_r:sysfs_edgetpu:s0 # Vendor sched files genfscon sysfs /kernel/vendor_sched/clear_prefer_high_cap u:object_r:sysfs_vendor_sched:s0