tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Fix dumpstate denials related to virtual_camera" into main

Browse source
This commit is contained in:
Treehugger Robot 2023-11-30 22:34:24 +00:00 committed by Gerrit Code Review
commit d3fe043eb8
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
private/dumpstate.te
View file

@ -59,6 +59,9 @@ userdebug_or_eng(`
# Allow dumpstate to talk to automotive_display_service over binder
binder_call(dumpstate, automotive_display_service)
# Allow dumpstate to talk to virtual_camera service over binder
binder_call(dumpstate, virtual_camera)
# Collect metrics on boot time created by init
get_prop(dumpstate, boottime_prop)
@ -67,6 +70,7 @@ allow dumpstate {
mediatranscoding
statsd
netd
virtual_camera
}:process signal;
# Only allow dumpstate to dump Keystore on debuggable builds.

4
private/virtual_camera.te
View file

@ -24,3 +24,7 @@ hal_client_domain(virtual_camera, hal_graphics_allocator)
# Allow virtual_camera to use GPU
allow virtual_camera gpu_device:chr_file rw_file_perms;
allow virtual_camera gpu_device:dir r_dir_perms;
# For collecting bugreports.
allow virtual_camera dumpstate:fd use;
allow virtual_camera dumpstate:fifo_file write;