diff --git a/sepolicy/file.te b/sepolicy/file.te index 069f044..0bbc896 100644 --- a/sepolicy/file.te +++ b/sepolicy/file.te @@ -1,5 +1,6 @@ type app_efs_file, file_type; type biometrics_data_file, file_type, data_file_type; type wifi_efs_file, file_type; +type sysfs_camera, fs_type, sysfs_type; type sysfs_mdnie, fs_type, sysfs_type; type sysfs_sec_key, fs_type, sysfs_type; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index f63a804..0e71069 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -1,3 +1,6 @@ +# Camera +/sys/devices/virtual/camera(/.*)? u:object_r:sysfs_camera:s0 + # EFS /dev/block/platform/soc\.0/7824900\.sdhci/by-name/efs u:object_r:efs_block_device:s0 /efs/bluetooth(/.*)? u:object_r:bluetooth_efs_file:s0 diff --git a/sepolicy/hal_camera_default.te b/sepolicy/hal_camera_default.te index 115e23b..f733af5 100644 --- a/sepolicy/hal_camera_default.te +++ b/sepolicy/hal_camera_default.te @@ -1 +1,5 @@ +allow hal_camera_default camera_data_file:dir w_dir_perms; allow hal_camera_default camera_data_file:sock_file write; + +allow hal_camera_default sysfs_camera:dir search; +allow hal_camera_default sysfs_camera:file rw_file_perms; diff --git a/sepolicy/mm-qcamerad.te b/sepolicy/mm-qcamerad.te new file mode 100644 index 0000000..1a23715 --- /dev/null +++ b/sepolicy/mm-qcamerad.te @@ -0,0 +1,2 @@ +allow mm-qcamerad sysfs_camera:dir search; +allow mm-qcamerad sysfs_camera:file rw_file_perms;