#
# Device policy configuration file.   When devices are opened the
# additional access controls in this file are enforced.
#
# The format of this file is subject to change without notice.
#
# Default open privileges, must be first entry in the file.
#

*		read_priv_set=none		write_priv_set=none
md:admin					write_priv_set=sys_config
biosdrv:*	write_priv_set=all
bridge:*	read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
cmdk:*	tpd_member=true
fp:*	tpd_member=true
fssnap:ctl	read_priv_set=sys_config	write_priv_set=sys_config
icmp:*	read_priv_set=net_icmpaccess	write_priv_set=net_icmpaccess
icmp6:*	read_priv_set=net_icmpaccess	write_priv_set=net_icmpaccess
ip:*	read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
ip6:*	read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
ipf:*	read_priv_set=sys_ip_config	write_priv_set=sys_ip_config
ipnet:*	read_priv_set=net_observability	write_priv_set=net_observability
ipsecah:*	read_priv_set=sys_ip_config	write_priv_set=sys_ip_config
ipsecesp:*	read_priv_set=sys_ip_config	write_priv_set=sys_ip_config
keysock:*	read_priv_set=sys_ip_config	write_priv_set=sys_ip_config
mm:allkmem	read_priv_set=all	write_priv_set=all
mm:kmem	read_priv_set=none	write_priv_set=all
mm:mem	read_priv_set=none	write_priv_set=all
openeepr:*	write_priv_set=all
physmem:*	write_priv_set=all
random:*	write_priv_set=sys_devices
scsi_vhci:devctl	write_priv_set=sys_devices
sd:*	tpd_member=true
sgen:*	tpd_member=true
spdsock:*	read_priv_set=sys_ip_config	write_priv_set=sys_ip_config
uefi_rt:uefi_rt	read_priv_set=all	write_priv_set=all
md:*	tpd_member=true
xsvc:*	read_priv_set=all	write_priv_set=all	tpd_member=false