sdm660-common: sepolicy: fix Camera denials for access camera data

* needed for clover oreo blobs
This commit is contained in:
Max Weffers 2019-08-20 23:11:46 +02:00
parent 109670399d
commit 8d090cc4db
No known key found for this signature in database
GPG key ID: 795F73D22FB93FAE
2 changed files with 6 additions and 0 deletions

View file

@ -1,7 +1,12 @@
binder_call(hal_camera_default, hal_configstore_default)
binder_call(hal_camera_default, hal_graphics_allocator_default)
typeattribute hal_camera_default data_between_core_and_vendor_violators;
allow hal_camera_default { hal_configstore_ISurfaceFlingerConfigs hal_graphics_allocator_hwservice }:hwservice_manager find;
allow hal_camera_default sysfs:file { getattr open read };
allow hal_camera_default sysfs_kgsl:file { getattr open read };
allow hal_camera_default camera_data_file:dir w_dir_perms;
allow hal_camera_default camera_data_file:file create_file_perms;
set_prop(hal_camera_default, vendor_camera_prop)

View file

@ -5,6 +5,7 @@ allow vendor_init {
media_rw_data_file
system_data_file
tombstone_data_file
camera_data_file
}:dir { create search getattr open read setattr ioctl write add_name remove_name rmdir relabelfrom };
set_prop(vendor_init, camera_prop)