Fixing the following permissions for userdebug/eng builds

denied { add_name } for name="eis_log_012916_640563.txt"
scontext=u:r:hal_camera_default:s0
tcontext=u:object_r:system_data_file:s0 tclass=dir

denied { create } for name="eis_log_012916_640563.txt"
scontext=u:r:hal_camera_default:s0
tcontext=u:object_r:system_data_file:s0 tclass=file

denied { write open } for path="/data/eis/eis_log_012916_640563.txt"
dev="dm-0" ino=2195458 scontext=u:r:hal_camera_default:s0
tcontext=u:object_r:system_data_file:s0 tclass=file

denied { getattr } for path="/data/eis/gyro_log_012916_640563.txt"
dev="dm-0" ino=2195459 scontext=u:r:hal_camera_default:s0
tcontext=u:object_r:system_data_file:s0 tclass=file

Bug: 38048356
Test: Camera debug information is properly written out
Change-Id: I0066d745ac4598905e6b23e2b958d71a4d53e9fe
This commit is contained in:
Max Bires
2017-05-05 19:41:27 -07:00
parent c7e3c64341
commit a25607c7ed
3 changed files with 8 additions and 0 deletions

View File

@@ -39,6 +39,7 @@ type persist_sensors_file, file_type;
type netmgr_data_file, file_type, data_file_type;
type camera_vendor_data_file, file_type, data_file_type;
type nfc_vendor_data_file, file_type, data_file_type;
type radio_vendor_data_file, file_type, data_file_type, mlstrustedobject;
type cnss_vendor_data_file, file_type, data_file_type, mlstrustedobject;

View File

@@ -267,6 +267,7 @@
/data/misc/location(/.*)? u:object_r:location_data_file:s0
/data/ramdump(/.*)? u:object_r:ramdump_data_file:s0
/data/nfc(/.*)? u:object_r:nfc_data_file:s0
/data/vendor/camera(/.*)? u:object_r:camera_vendor_data_file:s0
/data/vendor/nfc(/.*)? u:object_r:nfc_vendor_data_file:s0
/data/vendor/radio(/.*)? u:object_r:radio_vendor_data_file:s0
/data/vendor/wifi(/.*)? u:object_r:cnss_vendor_data_file:s0

View File

@@ -6,3 +6,9 @@ allow hal_camera_default qdisplay_service:service_manager { find };
binder_call(hal_camera_default, hal_graphics_composer)
binder_call(hal_camera_default, system_server)
# For camera team debugging
userdebug_or_eng(`
allow hal_camera_default camera_vendor_data_file:dir create_dir_perms;
allow hal_camera_default camera_vendor_data_file:file create_file_perms;
')