mirror of
https://github.com/Evolution-X-Devices/device_google_wahoo
synced 2026-02-01 07:50:47 +00:00
9da8401acb
- Add custom domain for GoogleCamera, with QDSP access - Add app cert for Google apps - Add new hexagon_halide_file type, apply it to two critical DSP libraries, and grant GoogleCamera access to them. - Also allow tango_core access to hexagon_halide_file - Remove /vendor/lib/libhalide_hexagon_host from same_process_hal_file, it's not used by anything currently. - Move access to persist.camera.* properties to the generic app domain Test: GoogleCamera able to use Hexagon for HDR+ Bug: 62712071 Bug: 62341955 Change-Id: I2c49c35d9f90d07b148a2f27d0f8128f99b55b6c
42 lines
1.6 KiB
Plaintext
42 lines
1.6 KiB
Plaintext
type google_camera_app, domain, coredomain;
|
|
|
|
app_domain(google_camera_app)
|
|
|
|
# Access standard system services
|
|
allow google_camera_app app_api_service:service_manager find;
|
|
allow google_camera_app audioserver_service:service_manager find;
|
|
allow google_camera_app cameraserver_service:service_manager find;
|
|
allow google_camera_app drmserver_service:service_manager find;
|
|
allow google_camera_app mediacodec_service:service_manager find;
|
|
allow google_camera_app mediaextractor_service:service_manager find;
|
|
allow google_camera_app mediaserver_service:service_manager find;
|
|
allow google_camera_app mediametrics_service:service_manager find;
|
|
allow google_camera_app nfc_service:service_manager find;
|
|
allow google_camera_app surfaceflinger_service:service_manager find;
|
|
|
|
allow google_camera_app hidl_token_hwservice:hwservice_manager find;
|
|
|
|
# Execute libraries from RenderScript cache
|
|
allow google_camera_app app_data_file:file { rx_file_perms };
|
|
|
|
# Read memory info
|
|
allow google_camera_app proc_meminfo:file r_file_perms;
|
|
|
|
# gdbserver / stack traces
|
|
allow google_camera_app self:process ptrace;
|
|
|
|
# Access to Hexagon DSP kernel device
|
|
allow google_camera_app qdsp_device:chr_file { r_file_perms };
|
|
|
|
# Read and write system app data files passed over Binder.
|
|
# Motivating case was /data/data/com.android.settings/cache/*.jpg for
|
|
# cropping or taking user photos.
|
|
allow google_camera_app system_app_data_file:file { read write getattr };
|
|
|
|
# Allow GoogleCamera access to necessary vendor libraries to execute
|
|
# Halide code
|
|
allow google_camera_app hexagon_halide_file:file { execute read open getattr };
|
|
|
|
# Access to persist.camera.* system properties
|
|
get_prop(google_camera_app, camera_prop)
|