Files
device_google_wahoo/sepolicy/hal_camera_default.te
Max Bires 93f989ecc1 Adding allows and file_contexts to handle the following camera denials
These were occuring on camera init:
denied { read } for pid=699 comm="CAM_laser_sens" name="input"
dev="tmpfs" ino=17802 scontext=u:r:hal_camera_default:s0
tcontext=u:object_r:device:s0 tclass=dir

denied { write } for pid=699 comm="CAM_laser_sens"
name="enable_ps_sensor" dev="sysfs" ino=39968
scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:sysfs:s0
tclass=file

denied { call } for pid=810 comm="cameraserver"
scontext=u:r:cameraserver:s0 tcontext=u:r:mediacodec:s0 tclass=binder

Bug: 37669506
Test: These denials no longer occur during init
Change-Id: Ie97ab9433efd43da29f18ffa652c43701b3662af
2017-04-26 03:28:38 +00:00

7 lines
239 B
Plaintext

# TODO(b/36569385): Remove once Camera HAL no longer uses Binder
typeattribute hal_camera_default binder_in_vendor_violators;
allow hal_camera_default input_device:dir r_dir_perms;
allow hal_camera_default sysfs_laser:file w_file_perms;