android_device_google_gs-co.../camera/sepolicy/vendor/init.camera.set-interrupts-ownership.te
Inseob Kim dc624c5311 Move camera's coredomain sepolicy to product
Because they are installed to product partition and it's Treble
violation to assign them with vendor sepolicy

Bug: 296512192
Test: lunch panther and build
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:85f9b1e5bc9320a4ab8dc3f6d26027dba76882c6)
Merged-In: I2d2c2a8027eed2b3e2ee1a78d629d44b99867128
Change-Id: I2d2c2a8027eed2b3e2ee1a78d629d44b99867128
2023-09-05 23:51:15 +00:00

11 lines
595 B
Plaintext

type init-camera-set-interrupts-ownership, domain;
type init-camera-set-interrupts-ownership_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(init-camera-set-interrupts-ownership)
allow init-camera-set-interrupts-ownership vendor_toolbox_exec:file rx_file_perms;
allow init-camera-set-interrupts-ownership proc_interrupts:file r_file_perms;
allow init-camera-set-interrupts-ownership proc_irq:dir r_dir_perms;
allow init-camera-set-interrupts-ownership proc_irq:file { r_file_perms setattr };
allow init-camera-set-interrupts-ownership self:capability { chown setuid setgid };