Files
Stricted 4d73673ab0 sepolicy: address cameraserver denials
Change-Id: I45d58beea2570c8d5341bc3eef956150ed340247
(cherry picked from commit 62034ce5ea0c08cbeb25ff9aefba0912d2f6f27e)
2021-01-17 01:13:39 +00:00

22 lines
911 B
Plaintext

# nvram
allow cameraserver nvdata_file:dir rw_dir_perms;
allow cameraserver nvdata_file:file create_file_perms;
allow cameraserver ccci_device:chr_file rw_file_perms;
# camera
allow cameraserver sensorservice_service:service_manager find;
allow cameraserver system_server:unix_stream_socket { read write };
allow cameraserver camera_device:chr_file rw_file_perms;
allow cameraserver mtk_smi_device:chr_file rw_file_perms;
allow cameraserver proc:file { read ioctl open };
allow cameraserver devmap_device:chr_file r_file_perms;
allow cameraserver devmap_device:chr_file { ioctl };
allow cameraserver sysfs_devinfo:file rw_file_perms;
allow cameraserver sysfs_membw:file rw_file_perms;
allow cameraserver proc_meminfo:file { open read getattr };
allow cameraserver sysfs_boot_mode:file r_file_perms;
allow cameraserver sysfs_ddr_type:file r_file_perms;
# PQ
allow cameraserver pq_service:service_manager find;