diff options
Diffstat (limited to 'sepolicy/hal_camera.te')
| -rw-r--r-- | sepolicy/hal_camera.te | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/sepolicy/hal_camera.te b/sepolicy/hal_camera.te new file mode 100644 index 0000000..6bbc346 --- /dev/null +++ b/sepolicy/hal_camera.te @@ -0,0 +1,15 @@ +vndbinder_use(hal_camera_default); + +allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find; +hal_client_domain(hal_camera_default, hal_graphics_allocator); +hal_client_domain(hal_camera_default, hal_graphics_composer); + +# for external camera +allow cameraserver device:dir r_dir_perms; +allow cameraserver video_device:dir r_dir_perms; +allow cameraserver video_device:chr_file rw_file_perms; + +allow hal_camera_default gpu_device:chr_file { open read write ioctl map getattr }; +allow hal_camera_default dri_device:dir { open read search }; +allow cameraserver dri_device:dir { open read write search getattr }; +allow cameraserver gpu_device:chr_file { open read write ioctl map getattr }; |