Snap for 12695596 from cafe80b310 to 25Q1-release

Change-Id: Ie0aee6d7d664b31014f57720d0405bf88066d492
This commit is contained in:
Android Build Coastguard Worker 2024-11-22 00:03:09 +00:00
commit e89b70bf3a
3 changed files with 8 additions and 0 deletions

View file

@ -24,3 +24,6 @@ allow hal_gnss_pixel vendor_gps_file:fifo_file create_file_perms;
# Allow access ssrdump information
allow hal_gnss_pixel sscoredump_vendor_data_crashinfo_file:file r_file_perms;
allow hal_gnss_pixel sscoredump_vendor_data_crashinfo_file:dir r_dir_perms;
# Allow pixel gnss access vendor_gps_file
allow hal_gnss_pixel vendor_gps_file:file create_file_perms;

View file

@ -1,3 +1,7 @@
# Allow Tachyon service to access the GXP device and read GXP properties.
allow edgetpu_tachyon_server gxp_device:chr_file rw_file_perms;
get_prop(edgetpu_tachyon_server, vendor_gxp_prop)
# Allow tachyon service to log to stats service for reporting metrics.
allow edgetpu_tachyon_server fwk_stats_service:service_manager find;
binder_call(edgetpu_tachyon_server, system_server);

View file

@ -13,6 +13,7 @@ binder_call(mediacodec_google, hal_camera_default)
allow mediacodec_google dmabuf_system_heap_device:chr_file r_file_perms;
allow mediacodec_google video_device:chr_file { read write open ioctl map };
allow mediacodec_google gpu_device:chr_file rw_file_perms;
# mediacodec_google should never execute any executable without a domain transition
neverallow mediacodec_google { file_type fs_type }:file execute_no_trans;