shared/sepolicy/vsoc_input_service.te

type vsoc_input_service, domain;
type vsoc_input_service_exec, exec_type, file_type;

init_daemon_domain(vsoc_input_service)

# I/O with /dev/uinput
allow vsoc_input_service uhid_device:chr_file rw_file_perms;

# Framebuffer I/O (needed to obtain the screen size)
allow vsoc_input_service fb_ctl_file:file rw_file_perms;
allow vsoc_input_service userspace_fb_file:file rw_file_perms;