diff --git a/sepolicy/file.te b/sepolicy/file.te index 0150587d..fc9a841d 100644 --- a/sepolicy/file.te +++ b/sepolicy/file.te @@ -39,6 +39,7 @@ type persist_sensors_file, file_type; type netmgr_data_file, file_type, data_file_type; +type camera_vendor_data_file, file_type, data_file_type; type nfc_vendor_data_file, file_type, data_file_type; type radio_vendor_data_file, file_type, data_file_type, mlstrustedobject; type cnss_vendor_data_file, file_type, data_file_type, mlstrustedobject; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index 1b502a8c..1862c315 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -267,6 +267,7 @@ /data/misc/location(/.*)? u:object_r:location_data_file:s0 /data/ramdump(/.*)? u:object_r:ramdump_data_file:s0 /data/nfc(/.*)? u:object_r:nfc_data_file:s0 +/data/vendor/camera(/.*)? u:object_r:camera_vendor_data_file:s0 /data/vendor/nfc(/.*)? u:object_r:nfc_vendor_data_file:s0 /data/vendor/radio(/.*)? u:object_r:radio_vendor_data_file:s0 /data/vendor/wifi(/.*)? u:object_r:cnss_vendor_data_file:s0 diff --git a/sepolicy/hal_camera_default.te b/sepolicy/hal_camera_default.te index 9aa8df64..df5516bb 100644 --- a/sepolicy/hal_camera_default.te +++ b/sepolicy/hal_camera_default.te @@ -6,3 +6,9 @@ allow hal_camera_default qdisplay_service:service_manager { find }; binder_call(hal_camera_default, hal_graphics_composer) binder_call(hal_camera_default, system_server) + +# For camera team debugging +userdebug_or_eng(` + allow hal_camera_default camera_vendor_data_file:dir create_dir_perms; + allow hal_camera_default camera_vendor_data_file:file create_file_perms; +')