From ba53a62a59fdbf64a6929944077389eb71a0192f Mon Sep 17 00:00:00 2001 From: Timmy Li Date: Wed, 6 Nov 2024 18:00:29 +0000 Subject: [PATCH] Revert^2 "Add more access for GCA to edgetpu" This reverts commit 84d3523c6c9d6f0e9ae3d918871eed6e12c6c506. Reason for revert: Remerge attempt after fixing build error. Bug: 361092857 Test: manual test with GCA for permissions Flag: EXEMPT add permissions 11-06 03:01:49.736 719 719 W binder:719_3: type=1400 audit(0.0:710): avc: denied { read write } for path="/dev/edgetpu-soc" dev="tmpfs" ino=1542 scontext=u:r:google_camera_app:s0:c155,c256,c512,c768 tcontext=u:object_r:edgetpu_device:s0 tclass=chr_file permissive=0 Change-Id: I89ec01928edc4fcb4832d2da84c442354a65c25c --- gcam_app/sepolicy/vendor/google_camera_app.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gcam_app/sepolicy/vendor/google_camera_app.te b/gcam_app/sepolicy/vendor/google_camera_app.te index 3f5a0ec..a1c3ddb 100644 --- a/gcam_app/sepolicy/vendor/google_camera_app.te +++ b/gcam_app/sepolicy/vendor/google_camera_app.te @@ -6,7 +6,7 @@ get_prop(google_camera_app, vendor_gxp_prop) # Allows GCA to find and access the EdgeTPU. allow google_camera_app edgetpu_app_service:service_manager find; -allow google_camera_app edgetpu_device:chr_file { ioctl }; +allow google_camera_app edgetpu_device:chr_file { read write ioctl }; # Allows GCA to access the hw_jpeg /dev/video12. #allow google_camera_app hw_jpg_device:chr_file rw_file_perms;