Evolution-X-Tensor/device_google_gs-common
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add sepolicy configs for LyricConfigProvider Service am: 8a5b714f8d am: 1deacdecff

Browse source 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/24111088

Change-Id: I4bbe27afab0054c7f309d1170aeb1809ff618229
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
malikakash 2023-07-20 02:13:17 +00:00 • committed by Automerger Merge Worker
commit 616b5f308c
5 changed files with 12 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
camera/sepolicy/hal_camera_default.te
View file

@ -1,4 +1,6 @@
allow hal_camera_default vendor_camera_binder_service:service_manager find; allow hal_camera_default vendor_camera_binder_service:service_manager find;
# Allow Lyric Hal to find the LyricConfigProvider service through ServiceManager.
allow hal_camera_default vendor_camera_lyricconfigprovider_service:service_manager find;
allow hal_camera_default hal_pixel_remote_camera_service:service_manager find; allow hal_camera_default hal_pixel_remote_camera_service:service_manager find;

2
camera/sepolicy/seapp_contexts
View file

@ -1,5 +1,7 @@
# Pixel PeristentBackgroundCameraServices # Pixel PeristentBackgroundCameraServices
user=system seinfo=platform name=com.google.pixel.camera.services domain=vendor_pbcs_app type=system_app_data_file levelFrom=all user=system seinfo=platform name=com.google.pixel.camera.services domain=vendor_pbcs_app type=system_app_data_file levelFrom=all
# The :* will allow all services, which run in their own processes, to use the same vendor_pbcs_app domain.
user=system seinfo=platform name=com.google.pixel.camera.services:* domain=vendor_pbcs_app type=system_app_data_file levelFrom=all
# Pixel Camera Services # Pixel Camera Services
user=_app seinfo=CameraServices name=com.google.android.apps.camera.services domain=vendor_pcs_app type=app_data_file levelFrom=all user=_app seinfo=CameraServices name=com.google.android.apps.camera.services domain=vendor_pcs_app type=app_data_file levelFrom=all

2
camera/sepolicy/service.te
View file

@ -1,3 +1,5 @@
type vendor_camera_binder_service, hal_service_type, protected_service, service_manager_type; type vendor_camera_binder_service, hal_service_type, protected_service, service_manager_type;
type hal_pixel_remote_camera_service, hal_service_type, protected_service, service_manager_type; type hal_pixel_remote_camera_service, hal_service_type, protected_service, service_manager_type;
type vendor_camera_lyricconfigprovider_service, hal_service_type, protected_service, service_manager_type;

2
camera/sepolicy/service_contexts
View file

@ -1,3 +1,5 @@
com.google.pixel.camera.services.binder.IServiceBinder/default u:object_r:vendor_camera_binder_service:s0 com.google.pixel.camera.services.binder.IServiceBinder/default u:object_r:vendor_camera_binder_service:s0
com.google.pixel.camera.connectivity.hal.provider.ICameraProvider/default u:object_r:hal_pixel_remote_camera_service:s0 com.google.pixel.camera.connectivity.hal.provider.ICameraProvider/default u:object_r:hal_pixel_remote_camera_service:s0
com.google.pixel.camera.services.lyricconfigprovider.ILyricConfigProvider/default u:object_r:vendor_camera_lyricconfigprovider_service:s0

5
camera/sepolicy/vendor_pbcs_app.te
View file

@ -6,6 +6,9 @@ dontaudit vendor_pbcs_app system_app_data_file:dir *;
allow vendor_pbcs_app app_api_service:service_manager find; allow vendor_pbcs_app app_api_service:service_manager find;
allow vendor_pbcs_app vendor_camera_binder_service:service_manager add; # Allow PBCS to add the ServiceBinder service to ServiceManager.
add_service(vendor_pbcs_app, vendor_camera_binder_service);
# Allow PBCS to add the LyricConfigProvider service to ServiceManager.
add_service(vendor_pbcs_app, vendor_camera_lyricconfigprovider_service);
binder_call(vendor_pbcs_app, hal_camera_default); binder_call(vendor_pbcs_app, hal_camera_default);