From ab68b50a02d9014708f6313fd87eb5190c03f715 Mon Sep 17 00:00:00 2001 From: Alex Klyubin Date: Thu, 16 Feb 2017 16:26:51 -0800 Subject: Move Camera HAL policy to hal_camera This moves cameraserver domain policy to do with Camera HAL running inside that domain into hal_camera. cameraserver is now associated with hal_camera. Test: Taking photod and recording videos using Google Camera works Bug: 34170079 Change-Id: Ic9b602ed0e95cace66e2ed5c69dfa94276dff773 --- sepolicy/cameraserver.te | 8 -------- sepolicy/hal_camera.te | 8 ++++++++ 2 files changed, 8 insertions(+), 8 deletions(-) delete mode 100644 sepolicy/cameraserver.te create mode 100644 sepolicy/hal_camera.te (limited to 'sepolicy') diff --git a/sepolicy/cameraserver.te b/sepolicy/cameraserver.te deleted file mode 100644 index b4369ce..0000000 --- a/sepolicy/cameraserver.te +++ /dev/null @@ -1,8 +0,0 @@ -# communicate with camera -allow cameraserver camera:unix_dgram_socket sendto; -allow cameraserver camera_data_file:sock_file write; - -# allow communication w/perfd -allow cameraserver perfd_data_file:dir search; -allow cameraserver perfd:unix_stream_socket connectto; -allow cameraserver perfd_data_file:sock_file write; diff --git a/sepolicy/hal_camera.te b/sepolicy/hal_camera.te new file mode 100644 index 0000000..3aae732 --- /dev/null +++ b/sepolicy/hal_camera.te @@ -0,0 +1,8 @@ +# communicate with camera +allow hal_camera camera:unix_dgram_socket sendto; +allow hal_camera camera_data_file:sock_file write; + +# allow communication w/perfd +allow hal_camera perfd_data_file:dir search; +allow hal_camera perfd:unix_stream_socket connectto; +allow hal_camera perfd_data_file:sock_file write; -- cgit v1.2.3