module libfprint-focal-spi 1.0; require { type fprintd_t; type fprintd_device_t; class chr_file { ioctl open read write }; } #============= fprintd_t ============== allow fprintd_t fprintd_device_t:chr_file { ioctl open read write };