MiPad4/android_device_xiaomi_sdm660-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sdm660-common: sepolicy: Address camera denials

Browse source 
Change-Id: I052adadca396fb104af49daec1d83047d0809416
This commit is contained in:
GuaiYiHu 2019-04-10 10:40:06 +08:00 committed by Max Weffers
parent 1ee97f41fc
commit d2ce22775d
No known key found for this signature in database
GPG key ID: 795F73D22FB93FAE
3 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
sepolicy/vendor/hal_camera_default.te vendored
View file

@ -4,3 +4,4 @@ binder_call(hal_camera_default, hal_graphics_allocator_default)
allow hal_camera_default { hal_configstore_ISurfaceFlingerConfigs hal_graphics_allocator_hwservice }:hwservice_manager find;
allow hal_camera_default sysfs:file { getattr open read };
allow hal_camera_default sysfs_kgsl:file { getattr open read };
set_prop(hal_camera_default, vendor_camera_prop)

10
sepolicy/vendor/property_contexts vendored
View file

@ -1,5 +1,3 @@
persist.camera. u:object_r:camera_prop:s0
persist.vendor.camera. u:object_r:camera_prop:s0
sys.fp.goodix u:object_r:hal_fingerprint_prop:s0
sys.fp.vendor u:object_r:hal_fingerprint_prop:s0
persist.sys.fp.info u:object_r:hal_fingerprint_prop:s0
@ -11,6 +9,14 @@ persist.vendor.sys.provision.status u:object_r:mlipay_prop:s0
persist.sys.thermal. u:object_r:thermal_engine_prop:s0
sys.thermal. u:object_r:thermal_engine_prop:s0
# Camera
camera. u:object_r:camera_prop:s0
cameradaemon.SaveMemAtBoot u:object_r:camera_prop:s0
cpp.set.clock u:object_r:camera_prop:s0
disable.cpp.power.collapse u:object_r:camera_prop:s0
persist.camera. u:object_r:camera_prop:s0
persist.vendor.camera. u:object_r:vendor_camera_prop:s0
# Fingerprint
gf.debug.dump_data u:object_r:vendor_fp_prop:s0
persist.sys.fp. u:object_r:vendor_fp_prop:s0

2
sepolicy/vendor/vendor_init.te vendored
View file

@ -11,3 +11,5 @@ allow vendor_init persist_debug_prop:property_service set;
allow vendor_init persist_dpm_prop:property_service set;
allow vendor_init qcom_ims_prop:property_service set;
allow vendor_init rootfs:lnk_file setattr;
set_prop(vendor_init, camera_prop)
set_prop(vendor_init, vendor_camera_prop)