From 76ed6d8a6d25d0bb1bddb9f1918c203dd180ba5a Mon Sep 17 00:00:00 2001
From: sandeepbandaru <sandeepbandaru@google,com>
Date: Thu, 9 Nov 2023 16:08:01 +0000
Subject: [PATCH] Adding policies for allowing inference services with TPU from
 isolated_compute_app

Test: make
Bug:309953452
Change-Id: I2b0dc17f1debc71ed78d37007213210a7a1aed77
---
 edgetpu/sepolicy/device.te  | 2 +-
 edgetpu/sepolicy/service.te | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/edgetpu/sepolicy/device.te b/edgetpu/sepolicy/device.te
index 9296ba5..78e918a 100644
--- a/edgetpu/sepolicy/device.te
+++ b/edgetpu/sepolicy/device.te
@@ -1,2 +1,2 @@
 # EdgeTPU device (DarwiNN)
-type edgetpu_device, dev_type, mlstrustedobject;
+type edgetpu_device, dev_type, mlstrustedobject, isolated_compute_allowed_device;
diff --git a/edgetpu/sepolicy/service.te b/edgetpu/sepolicy/service.te
index b1a5409..5ea2006 100644
--- a/edgetpu/sepolicy/service.te
+++ b/edgetpu/sepolicy/service.te
@@ -4,4 +4,4 @@ type edgetpu_dba_service, app_api_service, service_manager_type, isolated_comput
 type edgetpu_tachyon_service, app_api_service, service_manager_type, isolated_compute_allowed_service;
 
 # EdgeTPU binder service type declaration.
-type edgetpu_app_service, service_manager_type;
+type edgetpu_app_service, service_manager_type, isolated_compute_allowed_service;