Evolution-x-devices/device_xiaomi_stone
2
0
Fork 0
mirror of https://github.com/Evolution-X-Devices/device_xiaomi_stone synced 2026-02-01 06:28:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

sm6375-common: sepolicy: Address camera prop denials

Browse Source 
E libc    : Access denied finding property "vendor.camera.aux.packagelist"
E libc    : Access denied finding property "vendor.camera.aux.packageblacklist"
This commit is contained in:
Jackeagle
2023-06-27 06:20:45 +03:00
committed by boedhack99
parent ed151f16ad
commit 1779f36fec
4 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
sepolicy/vendor/app.te vendored
View File

@@ -2,3 +2,6 @@ allow { appdomain -isolated_app } vendor_xdsp_device:chr_file r_file_perms;
get_prop({ appdomain -isolated_app }, vendor_fingerprint_prop)
get_prop({ appdomain -isolated_app }, vendor_tee_listener_prop)
# Allow appdomain to get vendor_persist_camera_prop
get_prop(appdomain, vendor_camera_prop)

1
sepolicy/vendor/property_contexts vendored
View File

@@ -7,6 +7,7 @@ persist.camera. u:object_r:vendor_camera_prop:s0
ro.boot.camera.config u:object_r:vendor_camera_prop:s0
ro.camera. u:object_r:vendor_camera_prop:s0
ro.vendor.camera. u:object_r:vendor_camera_prop:s0
vendor.camera.aux.packageblacklist u:object_r:vendor_camera_prop:s0
vendor.camera.config. u:object_r:vendor_camera_prop:s0
vendor.camera.sensor. u:object_r:vendor_camera_prop:s0
sys.boot.hwc u:object_r:vendor_camera_prop:s0

5
sepolicy/vendor/system_server.te vendored
View File

@@ -1,3 +1,4 @@
allow system_server app_zygote:process { getattr getpgid };
allow system_server hal_camera_default:binder { call transfer };
allow system_server hal_camera_default:fd *;
@@ -5,3 +6,7 @@ allow system_server hal_camera_default:fd *;
allow system_server proc_last_kmsg:file r_file_perms;
allow system_server system_file:file r_file_perms;
# Allow system_server to set vendor_persist_camera_prop
get_prop(system_server, vendor_camera_prop)
get_prop(system_server,vendor_persist_camera_prop)

2
sepolicy/vendor/vendor_init.te vendored
View File

@@ -1,2 +1,4 @@
allow vendor_init proc_dirty:file rw_file_perms;
allow vendor_init block_device:lnk_file setattr;
set_prop(vendor_init, vendor_camera_prop)