sm6250-common: Address some Camera Denials

Co-authored-by: Jack Eagle  <jackeagle102@gmail.com>
This commit is contained in:
Ramii Ahmed 2021-01-14 19:24:51 +00:00
parent 02b34d3e67
commit 022dc24f6a
6 changed files with 11 additions and 0 deletions

2
sepolicy/vendor/app.te vendored Normal file
View File

@ -0,0 +1,2 @@
get_prop(appdomain, vendor_camera_prop)
get_prop(appdomain, camera_prop)

View File

@ -2,3 +2,4 @@ type hal_fingerprint_prop, property_type;
type mlipay_prop, property_type;
type thermal_engine_prop, property_type;
type lirc_prop, property_type;
type camera_prop, property_type;

View File

@ -11,6 +11,8 @@ cpp.set.clock u:object_r:vendor_default_prop:s0
disable.cpp.power.collapse u:object_r:vendor_default_prop:s0
vendor.camera.eis.gyro_name u:object_r:vendor_camera_prop:s0
vidc.enc.dcvs.extra-buff-count u:object_r:vendor_default_prop:s0
vendor.camera.aux.packageblacklist u:object_r:vendor_camera_prop:s0
vendor.camera.aux.packagelist u:object_r:vendor_camera_prop:s0
#IR
ro.lirc.dev u:object_r:lirc_prop:s0

2
sepolicy/vendor/system_app.te vendored Normal file
View File

@ -0,0 +1,2 @@
allow system_app vendor_default_prop:file { getattr open read };
allow system_app vendor_default_prop:file {map};

3
sepolicy/vendor/system_server.te vendored Normal file
View File

@ -0,0 +1,3 @@
# Allow system_server to set camera_prop
get_prop(system_server, vendor_camera_prop)
get_prop(system_server, camera_prop)

View File

@ -9,3 +9,4 @@ allow init adsprpcd_file:file mounton;
set_prop(vendor_init, vendor_freq_prop)
set_prop(vendor_init, vendor_camera_prop)
set_prop(vendor_init, camera_prop)