Evolution-X-Tensor/device_google_gs-common
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Allow tachyon service to make binder calls to gca

Browse source 
This permission is needed for tachyon service to call callbacks shared by clients of gxp/edgetpu device for tensor G5. As tachyon is present in pixel 6 where google_camera_app is not defined, I need to assign it here.

AVC Error seen when tachyon tries accessing GCA:
01-22 11:40:03.212  6987  6987 W com.google.edge: type=1400 audit(0.0:17): avc:  denied  { call } for  scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:google_camera_app:s0:c145,c256,c512,c768 tclass=binder permissive=0
01-23 07:12:26.424  4166  4166 W com.google.edge: type=1400 audit(0.0:254): avc:  denied  { call } for  scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:debug_camera_app:s0:c67,c257,c512,c768 tclass=binder permissive=0

Bug:391537620
Flag: EXEMPT updates device sepolicy only
Change-Id: I9dd78bd941b0de9057606409fd18632cc76f56b0
This commit is contained in:
Dinesh Yadav 2025-01-24 07:00:51 +00:00
parent 5201b55858
commit 25b66183cf
2 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
gcam_app/sepolicy/vendor/debug_camera_app.te vendored
View file

@ -12,5 +12,8 @@ userdebug_or_eng(`
# Allows GCA_Eng & GCA-Next to access the hw_jpeg /dev/video12. # Allows GCA_Eng & GCA-Next to access the hw_jpeg /dev/video12.
# allow debug_camera_app hw_jpg_device:chr_file rw_file_perms; # allow debug_camera_app hw_jpg_device:chr_file rw_file_perms;
# Allows tachyon_service to communicate with GCA-Eng via binder.
binder_call(edgetpu_tachyon_server, debug_camera_app);
') ')

2
gcam_app/sepolicy/vendor/google_camera_app.te vendored
View file

@ -11,3 +11,5 @@ allow google_camera_app edgetpu_device:chr_file { read write ioctl };
# Allows GCA to access the hw_jpeg /dev/video12. # Allows GCA to access the hw_jpeg /dev/video12.
#allow google_camera_app hw_jpg_device:chr_file rw_file_perms; #allow google_camera_app hw_jpg_device:chr_file rw_file_perms;
# Allows tachyon service to communicate with google_camera_app via binder.
binder_call(edgetpu_tachyon_server, google_camera_app);