Merge "Add cameraserver and NFC HAL to socket comms violators list"

This commit is contained in:
Alex Klyubin
2017-03-31 16:12:07 +00:00
committed by Android (Google) Code Review
2 changed files with 5 additions and 0 deletions

View File

@@ -13,6 +13,10 @@ allow hal_camera self:capability sys_nice;
allow hal_camera gpu_device:chr_file rw_file_perms;
allow hal_camera perfd_socket:sock_file w_file_perms;
# TODO(b/34274385): Remove this once Camera HAL is guaranteed to be binderized on full Treble
# devices. Passthrough Camera HAL makes cameraserver use perfd socket which is a vendor socket.
# cameraserver, being a non-vendor component, is not permitted to use that socket.
typeattribute cameraserver socket_between_core_and_vendor_violators;
# access to /dev/input/event{5,10}
allow hal_camera input_device:dir r_dir_perms;

View File

@@ -23,6 +23,7 @@ allow nfc_hal_pn54x nfc_device:chr_file rw_file_perms;
# outside /data/vendor. Also, the label cannot be nfc_data_file since
# that belongs to the nfc app.
typeattribute nfc_hal_pn54x coredata_in_vendor_violators;
typeattribute nfc_hal_pn54x socket_between_core_and_vendor_violators;
allow nfc_hal_pn54x nfc_data_file:dir create_dir_perms;
allow nfc_hal_pn54x nfc_data_file:notdevfile_class_set create_file_perms;