# Allow privileged app to use VirtualDeviceManager Binder service
allow priv_app virtualdevice_service:service_manager find;
allow priv_app virtualdevice_service:dir { search };
allow priv_app virtualdevice_service:file { read open };