android_device_google_gs-co.../camera/sepolicy/seapp_contexts

# Pixel PeristentBackgroundCameraServices
user=system seinfo=platform name=com.google.pixel.camera.services domain=vendor_pbcs_app type=system_app_data_file levelFrom=all
# The :* will allow all services, which run in their own processes, to use the same vendor_pbcs_app domain.
user=system seinfo=platform name=com.google.pixel.camera.services:* domain=vendor_pbcs_app type=system_app_data_file levelFrom=all

# Pixel Camera Services
user=_app seinfo=CameraServices name=com.google.android.apps.camera.services domain=vendor_pcs_app type=app_data_file levelFrom=all
# The :* will allow all services, which run in their own processes, to use the same vendor_pcs_app domain.
user=_app seinfo=CameraServices name=com.google.android.apps.camera.services:* domain=vendor_pcs_app type=app_data_file levelFrom=all
Add vendor_pbcs_app domain for PersistentBackgroundCameraServices Bug: 287069860 Test: lunch <device-type>-userdebug && m Change-Id: I4153daaf3c8c656380333e695cc7f99ecd821e21 2023-06-29 18:19:30 -07:00			`# Pixel PeristentBackgroundCameraServices`
			`user=system seinfo=platform name=com.google.pixel.camera.services domain=vendor_pbcs_app type=system_app_data_file levelFrom=all`
Add sepolicy configs for LyricConfigProvider Service - Introduce service_context for ILyricConfigProvider service - Allow adding the ILyricConfigProvider to the service manager. - Allow HAL to find ILyricConfigProvider from servicemanager - Allow all proceses in com.google.pixel.services:* to have the same domain as the app (vendor_pbcs_app) -- We'll be running services in their own processes so this is needed. - TODO: binder_call(vendor_pbcs_app, vendor_pcs_app); Allow PBCS appdomain to make binder calls into PCS appdomain after ag/24030784 lands. Bug: 280340307 Test: We can successfully start and register the LyricConfigProvider service with the servicemanager. Change-Id: Ia0a74065e98761e48aa041bf7f2f34188017cee4 2023-07-18 05:37:00 +00:00			`# The :* will allow all services, which run in their own processes, to use the same vendor_pbcs_app domain.`
			`user=system seinfo=platform name=com.google.pixel.camera.services:* domain=vendor_pbcs_app type=system_app_data_file levelFrom=all`
Revert^2 "Add vendor_pcs_app domain for PixelCameraServices" Revert submission 24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL Reason for revert: Relanding the original topic after copying the certificates under `device/google` for `without-vendor` branches Reverted changes: /q/submissionid:24122569-revert-24056607-pixel-camera-services-extensions-sepolicy-OFSULTXSBL Bug: 287069860 Test: m && flashall Change-Id: Ic6ef3d67a518500f0db2cb8c537a3934e64d366b 2023-07-19 02:47:43 +00:00
			`# Pixel Camera Services`
			`user=_app seinfo=CameraServices name=com.google.android.apps.camera.services domain=vendor_pcs_app type=app_data_file levelFrom=all`
Associate vendor_pcs_app with PCS services - :* will associate the context with the individual services, which might start in their own processes. Bug: 280340307 Test: m Change-Id: I0cc183ae07f18a2fc8e3c2caf960654296eeab53 2023-08-07 18:40:09 +00:00			`# The :* will allow all services, which run in their own processes, to use the same vendor_pcs_app domain.`
			`user=_app seinfo=CameraServices name=com.google.android.apps.camera.services:* domain=vendor_pcs_app type=app_data_file levelFrom=all`