msm8976-common: sepolicy: Address camera related denials

Change-Id: If1dea9ad887987b4e4e05aa52d4b2271e4025080
This commit is contained in:
LuK1337 2019-01-17 18:28:08 +01:00
parent 8ae15d9d5d
commit b0d28dc4c4
4 changed files with 10 additions and 0 deletions

View File

@ -1,5 +1,6 @@
type app_efs_file, file_type;
type biometrics_data_file, file_type, data_file_type;
type wifi_efs_file, file_type;
type sysfs_camera, fs_type, sysfs_type;
type sysfs_mdnie, fs_type, sysfs_type;
type sysfs_sec_key, fs_type, sysfs_type;

View File

@ -1,3 +1,6 @@
# Camera
/sys/devices/virtual/camera(/.*)? u:object_r:sysfs_camera:s0
# EFS
/dev/block/platform/soc\.0/7824900\.sdhci/by-name/efs u:object_r:efs_block_device:s0
/efs/bluetooth(/.*)? u:object_r:bluetooth_efs_file:s0

View File

@ -1 +1,5 @@
allow hal_camera_default camera_data_file:dir w_dir_perms;
allow hal_camera_default camera_data_file:sock_file write;
allow hal_camera_default sysfs_camera:dir search;
allow hal_camera_default sysfs_camera:file rw_file_perms;

2
sepolicy/mm-qcamerad.te Normal file
View File

@ -0,0 +1,2 @@
allow mm-qcamerad sysfs_camera:dir search;
allow mm-qcamerad sysfs_camera:file rw_file_perms;