Commit graph

6 commits

Author SHA1 Message Date
Inseob Kim
85f9b1e5bc Move camera's coredomain sepolicy to product
Because they are installed to product partition and it's Treble
violation to assign them with vendor sepolicy

Bug: 296512192
Test: lunch panther and build
Change-Id: I2d2c2a8027eed2b3e2ee1a78d629d44b99867128
2023-09-05 13:13:01 +09:00
malikakash
8dc27bcee5 Add SePolicy allowances for ICameraIdRemapper
- This allows us to register the CameraIdRemapper
  service through servicemanager and allows PCS
  to find it.

Bug: 287069860
Test: m
Change-Id: Ic7f778c4f173caa1ce389c9ad39a14433afc3133
2023-08-07 23:07:00 +00:00
Eliot Wong
2daad9a814 Add SEPolicy for vendor_camera_isp_service
Allows the Camera HAL to start a new ISP Service.

avc message:
07-31 17:08:46.990   536   536 E SELinux : avc:  denied  { add } for
pid=8308 uid=1000 name=com.google.pixel.camera.isp.IIspService/default
scontext=u:r:hal_camera_default:s0
tcontext=u:object_r:default_android_service:s0 tclass=service_manager
permissive=0

Bug: 293447476
Test: verify no avc errors and ISP Service starts
Test: atest liblyric.services_isp_service_test
Change-Id: Icbd07820d3323c09868d0249c1ef9d7f2952751e
2023-08-02 15:23:27 +00:00
malikakash
8a5b714f8d Add sepolicy configs for LyricConfigProvider Service
- Introduce service_context for ILyricConfigProvider service
- Allow adding the ILyricConfigProvider to the service manager.
- Allow HAL to find ILyricConfigProvider from servicemanager
- Allow all proceses in com.google.pixel.services:* to have the same domain as the app (vendor_pbcs_app)
  -- We'll be running services in their own processes so this
     is needed.
- TODO: binder_call(vendor_pbcs_app, vendor_pcs_app);
  Allow PBCS appdomain to make binder calls into PCS appdomain
  after ag/24030784 lands.

Bug: 280340307
Test: We can successfully start and register the LyricConfigProvider service with the servicemanager.
Change-Id: Ia0a74065e98761e48aa041bf7f2f34188017cee4
2023-07-19 21:21:39 +00:00
Utku Utkan
88284b922a Add SEPolicy for hal_pixel_remote_camera_service
Bug: 287069860
Test: Manual developer testing with 'setenforce 1'
Change-Id: Iffe22dae7485bd433abdb60249ce8900a1996291
2023-07-18 20:53:59 -07:00
Utku Utkan
fb20bc80c4 Add SEPolicy for vendor_camera_binder_service
Bug: 287069860
Test: lunch <device-type>-userdebug && m
Change-Id: Id993e137ebc041e583b4f6c5f6e1ab6e8cdae7b2
2023-07-12 09:45:54 -07:00