drgreen/android_device_google_gs-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add SEPolicy for hal_pixel_remote_camera_service

Browse Source 
Bug: 287069860
Test: Manual developer testing with 'setenforce 1'
Change-Id: Iffe22dae7485bd433abdb60249ce8900a1996291
This commit is contained in:
Utku Utkan 2023-06-14 21:29:35 -07:00
parent ab8b16b905
commit 88284b922a
4 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
camera/sepolicy/hal_camera_default.te
View File

@ -1,3 +1,7 @@
allow hal_camera_default vendor_camera_binder_service:service_manager find; allow hal_camera_default vendor_camera_binder_service:service_manager find;
allow hal_camera_default hal_pixel_remote_camera_service:service_manager find;
binder_call(hal_camera_default, vendor_pbcs_app); binder_call(hal_camera_default, vendor_pbcs_app);
binder_call(hal_camera_default, vendor_pcs_app);

2
camera/sepolicy/service.te
View File

@ -1 +1,3 @@
type vendor_camera_binder_service, hal_service_type, protected_service, service_manager_type; type vendor_camera_binder_service, hal_service_type, protected_service, service_manager_type;
type hal_pixel_remote_camera_service, hal_service_type, protected_service, service_manager_type;

2
camera/sepolicy/service_contexts
View File

@ -1 +1,3 @@
com.google.pixel.camera.services.binder.IServiceBinder/default u:object_r:vendor_camera_binder_service:s0 com.google.pixel.camera.services.binder.IServiceBinder/default u:object_r:vendor_camera_binder_service:s0
com.google.pixel.camera.connectivity.hal.provider.ICameraProvider/default u:object_r:hal_pixel_remote_camera_service:s0

4
camera/sepolicy/vendor_pcs_app.te
View File

@ -5,3 +5,7 @@ app_domain(vendor_pcs_app);
allow vendor_pcs_app app_api_service:service_manager find; allow vendor_pcs_app app_api_service:service_manager find;
allow vendor_pcs_app cameraserver_service:service_manager find; allow vendor_pcs_app cameraserver_service:service_manager find;
allow vendor_pcs_app hal_pixel_remote_camera_service:service_manager add;
binder_call(vendor_pcs_app, hal_pixel_remote_camera_service);