Commit graph

7 commits

Author SHA1 Message Date
dcashman
cc39f63773 Split general policy into public and private components.
Divide policy into public and private components.  This is the first
step in splitting the policy creation for platform and non-platform
policies.  The policy in the public directory will be exported for use
in non-platform policy creation.  Backwards compatibility with it will
be achieved by converting the exported policy into attribute-based
policy when included as part of the non-platform policy and a mapping
file will be maintained to be included with the platform policy that
maps exported attributes of previous versions to the current platform
version.

Eventually we would like to create a clear interface between the
platform and non-platform device components so that the exported policy,
and the need for attributes is minimal.  For now, almost all types and
avrules are left in public.

Test: Tested by building policy and running on device.

Change-Id: Idef796c9ec169259787c3f9d8f423edf4ce27f8c
2016-10-06 13:09:06 -07:00
Jeff Vander Stoep
0474e7c5f5 resurrect camera_device
(cherry picked from commit e8a53dff5b)

With the breakup of mediaserver, distinguishing between
camera_device and video_device is meaningful. Only grant
cameraserver access to camera_device.

Bug: 28359909
Change-Id: I0ae12f87bac8a5c912f0a693d1d56a8d5af7f3f3
2016-08-28 15:36:33 -07:00
Jeff Vander Stoep
21f77f630b buildtime/cts enforce no inet access for media domains
Bug: 28348382
Change-Id: Iaab1430750dfbb997900d3d70993c9fff2a8745d
2016-04-22 15:39:00 -07:00
Jeff Vander Stoep
3872ee3968 cameraserver: flip to enforcing mode
Bug: 26982110
Change-Id: I551f8cc926886de0feaf065da46d3cf5bdf5cfb5
2016-02-26 15:33:54 -08:00
Chien-Yu Chen
9f9444c5e9 cameraserver: allow scheduling_policy_service
scheduling_policy_service is needed for high speed video recording.

Bug: 26982110
Change-Id: I377516c9d86d68e7024a67d04742baa841ff8907
2016-02-11 18:05:14 -08:00
Jeff Vander Stoep
4541687be5 cameraserver: Build up least privileged policy
Remove all permissions not observed during testing.

Remove domain_deprecated.

Bug: 26982110
Change-Id: I33f1887c95bdf378c945319494378225b41db215
2016-02-09 18:00:59 -08:00
Chien-Yu Chen
e0378303b5 selinux: Update policies for cameraserver
Update policies for cameraserver so it has the same permissions
as mediaserver.

Bug: 24511454
Change-Id: I1191e2ac36c00b942282f8dc3db9903551945adb
2016-01-27 11:29:11 -08:00