6 Commits

Author SHA1 Message Date
Eliot Wong
c387a9b7ac Add SEPolicy for vendor_camera_image_processing_hal_service
avc message:
03-15 17:48:21.744   440   440 E SELinux : avc:  denied  { add } for pid=863 uid=1000 name=com.google.android.imageprocessing.IImageProcessingHal scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:vendor_image_processing_hal_service:s0 tclass=service_manager permissive=1

Bug: 323402267
Test: atest liblyric.services_image_processing_hal_test
Test: demo app
Change-Id: Idc9752a1a3f4b18de5f720a384fae97f0f160e98
2024-03-28 01:50:02 +00:00
malikakash
ded0ee6c6e Give EdgeTpu access to vendor_pcs_app
- In addition, add some more allowances
  to more closely approximate a priv_app.
  Especially, accessing the cache, media
  storage and preloads.

Bug: 325326355
Test: I've tested that existing PCS doesn't break.

Change-Id: I045dd3e6d7587ba1bb405e57204d3cc7c9dc5f69
2024-02-16 03:50:35 +00:00
Kiyoung Kim
acc34fa037 Move definition for vendor_camera_binder_service into product
vendor_camera_binder_service is defined in vendor image, but this
property is required and used from the system image. This causes
Cuttlefish Hybrid Device to fail from sepolicy error. This change is to
move system-required property from vendor to product so it can be used
when vendor image is changed into generic one.

Bug: 309469924
Test: Build and boot succeeded with cheetah
Change-Id: Iea3e5be110498f759e268df8b7e5126b65b06a67
2023-11-15 12:44:31 +09:00
Aaron Ramirez
15cb30dcaf Add missing node_bind permission to SEPolicy.
Bug: 299315760
Test: Tested with SEPolicy enforcement on and verified PCS could open
requested video stream.

Change-Id: I41af99531feb968015c46cdf67d8c2d03b243a93
2023-09-18 11:17:14 -07:00
Aaron Ramirez
5d54c68f6c Configure SEPolicy to allow PCS to open and use socket connections.
Bug: 299315760
Test: Tested with SEPolicy enforcement on and verified PCS could perform
socket operations.

Change-Id: Idd9048da4bb3856666698bc0589dbc68aa74fd1a
2023-09-11 10:34:11 -07:00
Inseob Kim
dc624c5311 Move camera's coredomain sepolicy to product
Because they are installed to product partition and it's Treble
violation to assign them with vendor sepolicy

Bug: 296512192
Test: lunch panther and build
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:85f9b1e5bc9320a4ab8dc3f6d26027dba76882c6)
Merged-In: I2d2c2a8027eed2b3e2ee1a78d629d44b99867128
Change-Id: I2d2c2a8027eed2b3e2ee1a78d629d44b99867128
2023-09-05 23:51:15 +00:00