Consider 'tablet' component & tablet_use safe in secpolicy, fix incorrect documentation on k.computer

code/libs/sys-secpolicy.lua

@@ -22,7 +22,7 @@ local function actualPolicy(pkg, pid, perm, matchesSvc)
   return "allow"
  end
  -- These signals are harmless, though they identify HW (as does everything in OC...)
- if perm == "s.h.component_added" or perm == "s.h.component_removed" then
+ if perm == "s.h.component_added" or perm == "s.h.component_removed" or perm == "s.h.tablet_use" or perm == "c.tablet" then
   return "allow"
  end
  if matchesSvc("r.", pkg, perm) then

repository/docs/kn-perms

@@ -53,9 +53,9 @@ Here, "*" means that everything after
   program to start up.
 
 "k.computer": The "computer" table,
-               with wrapMeta applied,
-               pullSignal removed,
-               and also pushSignal.
+               with wrapMeta applied.
+The security check may be aliased to
+ the "k.root" permission in future.
 
 "k.kill": function (pid) to kill any
            process on the system.