tequilaOS/platform_device_qcom_sepolicy-legacy-um
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sepolicy: Add rules for data/vendor/camera

Browse source 
Enabling SE Linux policies for /data/vendor/camera
for filecreate and read permission

Change-Id: I971d74f76461b502911a4fabb2753d7b537845c0
This commit is contained in:
Sauhard Pande 2018-03-24 19:20:01 +05:30 committed by Gerrit - the friendly Code Review server
parent 55fe0717e2
commit 10541848d7
4 changed files with 7 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
vendor/common/file.te vendored
View file

@ -86,7 +86,7 @@ type persist_bluetooth_file, file_type;
type netmgr_data_file, file_type, data_file_type;
type ipa_vendor_data_file, file_type, data_file_type;
type camera_vendor_data_file, file_type, data_file_type;
type vendor_camera_data_file, file_type, data_file_type;
type display_vendor_data_file, file_type, data_file_type;
type nfc_vendor_data_file, file_type, data_file_type;
type radio_vendor_data_file, file_type, data_file_type, mlstrustedobject;

2
vendor/common/file_contexts vendored
View file

@ -195,7 +195,7 @@
/data/vendor/netmgr(/.*)? u:object_r:netmgr_data_file:s0
/data/vendor/location(/.*)? u:object_r:location_data_file:s0
/data/nfc(/.*)? u:object_r:nfc_data_file:s0
/data/vendor/camera(/.*)? u:object_r:camera_vendor_data_file:s0
/data/vendor/camera(/.*)? u:object_r:vendor_camera_data_file:s0
/data/vendor/display(/.*)? u:object_r:display_vendor_data_file:s0
/data/vendor/nfc(/.*)? u:object_r:nfc_vendor_data_file:s0
/data/vendor/radio(/.*)? u:object_r:radio_vendor_data_file:s0

4
vendor/common/hal_camera.te vendored
View file

@ -35,6 +35,10 @@ allowxperm hal_camera self:socket ioctl { IPC_ROUTER_IOCTL_LOOKUP_SERVER IPC_ROU
# ignore spurious denial
dontaudit hal_camera graphics_device:dir search;
allow hal_camera vendor_camera_data_file:dir rw_dir_perms;
allow hal_camera vendor_camera_data_file:file create_file_perms;
userdebug_or_eng(`
allow hal_camera diag_device:chr_file rw_file_perms;
')

2
vendor/common/vendor_init.te vendored
View file

@ -64,7 +64,7 @@ allow vendor_init vendor_file:system module_load;
allow vendor_init {
bluetooth_data_file
camera_data_file
vendor_camera_data_file
dhcp_data_file
media_rw_data_file
nfc_data_file