tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
47546 commits 1 branch 0 tags 50 MiB
Commit graph

13 commits

Author SHA1 Message Date
Jan Sebechlebsky
7f271ce061 Fix selinux denial when running adb shell cmd virtual_camera commands 
Bug: 333889277
Test: forrest
Change-Id: I195125b907f56e9a50d13e3ca4c28a1cfcc257b1
 2024-04-15 08:30:53 +00:00
Vadim Caen
68dc59dee5 Allow virtual_camera to use fd from surfaceflinger 
Test: atest --rerun-until-failure 100 android.hardware.camera2.cts.CaptureRequestTest#testEffectModes
Fixes: 329837920
Change-Id: I2de4e119383e4c8d4183957bfa6e1e363cdbbe4f
 2024-03-15 17:17:21 +01:00
Jan Sebechlebsky
fd7e285504 Allow virtual camera to use fd's from graphic composer 
This is causing denials in case the fence fd comes from
graphic composer.

Bug: 301023410
Test: atest CtsCameraTestCases with test virtual camera enabled
Change-Id: I14cb26c058342470aa2dc214ab47cc61aa2f3255
 2024-02-26 11:55:16 +01:00
Jan Sebechlebsky
0fd6d1bd26 Allow binder calls between virtual_camera / mediaserver & 
codecs.

This is required to allow Surface originating from
virtual_camera to be used by mediaserver & writen
to by codecs(for example to decode video into the
surface usign MediaPlayer).

Bug: 301023410
Test: Virtual Camera Test app
Change-Id: I2cac88accd4e1777f6c441c012cd0d36579a55e5
 2023-12-27 17:26:52 +01:00
Jan Sebechlebsky
6e1795cad0 Allow virtual camera to do binder calls to apps and vice versa. 
Virtual camera passes Surface to the app which internally uses binder
to communicate with the other side of buffer queue.

Bug: 301023410
Test: atest VirtualCameraTest
Change-Id: I3ea23532a5077c0b57a6f74c7814b9fdf69829ea
 2023-12-06 09:31:17 +01:00
Jan Sebechlebsky
0959befc45 Allow virtual camera service to find permission_service 
Bug: 301023410
Test: atest CtsVirtualDevicesCameraTestCases
Change-Id: I517fa4cdf6c3143eaf8ab9858e13159a7c5a818a
 2023-12-05 14:20:39 +01:00
Jan Sebechlebsky
de644175a9 Fix dumpstate denials related to virtual_camera 
Bug: 313794601
Test: atest android.security.cts.SELinuxHostTest#testNoBugreportDenials
Change-Id: Ie5b7c89388190fa927f8c762b2e65557f9d9870b
 2023-11-30 10:57:16 +01:00
Jan Sebechlebsky
267b6a9cf1 Allow virtual camera service to access gpu. 
Bug: 301023410
Test: adb shell cmd virtual_camera enable_test_camera & OpenCamera

Change-Id: I0ca68d6c4831d624a0aa9ad87f7b44cbb02ac96a
 2023-11-20 10:42:47 +01:00
Ján Sebechlebský
5d6b66c8ea Revert^2 "Allow system_server to communicate with virtual_camera" 
This reverts commit 76a62dfb3e.

Reason for revert: Relanding with virtual_camera flag disabled to prevent test failures before rc entry is added for the service (which needs to be done after this cl is submitted to prevent boot test failing due to selinux denials).

Test: https://android-build.corp.google.com/builds/abtd/run/L11500030000350228
Change-Id: Ie621f89610b173918bb4c0b6eb1f35547f56f6b7
 2023-11-20 10:42:11 +01:00
Matt Stokes
76a62dfb3e Revert "Allow system_server to communicate with virtual_camera" 
This reverts commit 45f1ecee7a.

Reason for revert: <Droid TestMonitor b/311401010>

Change-Id: I82716e9d52a66018c5e7d7d13c8292d7d19f253c
 2023-11-16 17:42:25 +00:00
Vadim Caen
45f1ecee7a Allow system_server to communicate with virtual_camera 
and consitently name service and process as "virtual_camera" (with
underscore)

Test: Cts VirtalCameraTest
Bug: 270352264
Change-Id: I2c6c0c03aab47aa1795cbda19af25e6661a0bf4a
 2023-11-14 15:27:57 +01:00
Vadim Caen
f6e88ec70a Policy for virtual_camera native service 
Change-Id: Id0c582f9259ffd056b22f111d7e81bc061c2371d
 2023-10-13 16:42:11 +02:00
Vadim Caen
d64cf75c48 Policy for virtual_camera 
Adds a policy to run the virtual_camera process which:
 - registers a service implementing the camera HAL
 - registers a service to reveive communicate with virtual cameras via
   system_server

Bug: 253991421
Test: CTS test
android.virtualdevice.cts.VirtualDeviceManagerBasicTest#createDevice_createCamera

Change-Id: I772d176919b8dcd3b73946935ed439207c948f2b
 2023-07-25 19:27:48 +00:00