Commit graph

9 commits

Author SHA1 Message Date
Cheng Gu
9d83f45ffb Adjust name of vendor_camera_image_processing_hal_service
Also removes vendor_camera_isp_service from sepolicy.

Bug: 354335791
Test: make
FLAG: EXEMPT bugfix
Change-Id: I1d1d2dd113676d0df5efc55d3a2fa931e3b9d588
2024-07-20 07:48:58 +00:00
Utku Utkan
1f61691a37 Move definition for vendor_camera_lyricconfigprovider_service into product
Following ag/25368073 as reference with the same justification.

Bug: 312091052
Test: atest PersistentBackgroundCameraServicesTests
Flag: EXEMPT SEPolicy refactoring to make CHD happy
Change-Id: Ie33a6550e0df0fd13271a15afd5beaaccae50e45
2024-06-18 22:13:48 +00:00
Utku Utkan
76783cf7e2 Move definition for vendor_camera_cameraidremapper_service into product
Following ag/25368073 as reference with the same justification.

Bug: 312091052
Test: atest PersistentBackgroundCameraServicesTests
Flag: EXEMPT SEPolicy refactoring to make CHD happy
Change-Id: If8810323750c2149b4624f8deffee1cd5c1ce36e
2024-06-18 22:12:41 +00:00
Eliot Wong
c387a9b7ac Add SEPolicy for vendor_camera_image_processing_hal_service
avc message:
03-15 17:48:21.744   440   440 E SELinux : avc:  denied  { add } for pid=863 uid=1000 name=com.google.android.imageprocessing.IImageProcessingHal scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:vendor_image_processing_hal_service:s0 tclass=service_manager permissive=1

Bug: 323402267
Test: atest liblyric.services_image_processing_hal_test
Test: demo app
Change-Id: Idc9752a1a3f4b18de5f720a384fae97f0f160e98
2024-03-28 01:50:02 +00:00
malikakash
ded0ee6c6e Give EdgeTpu access to vendor_pcs_app
- In addition, add some more allowances
  to more closely approximate a priv_app.
  Especially, accessing the cache, media
  storage and preloads.

Bug: 325326355
Test: I've tested that existing PCS doesn't break.

Change-Id: I045dd3e6d7587ba1bb405e57204d3cc7c9dc5f69
2024-02-16 03:50:35 +00:00
Kiyoung Kim
acc34fa037 Move definition for vendor_camera_binder_service into product
vendor_camera_binder_service is defined in vendor image, but this
property is required and used from the system image. This causes
Cuttlefish Hybrid Device to fail from sepolicy error. This change is to
move system-required property from vendor to product so it can be used
when vendor image is changed into generic one.

Bug: 309469924
Test: Build and boot succeeded with cheetah
Change-Id: Iea3e5be110498f759e268df8b7e5126b65b06a67
2023-11-15 12:44:31 +09:00
Aaron Ramirez
15cb30dcaf Add missing node_bind permission to SEPolicy.
Bug: 299315760
Test: Tested with SEPolicy enforcement on and verified PCS could open
requested video stream.

Change-Id: I41af99531feb968015c46cdf67d8c2d03b243a93
2023-09-18 11:17:14 -07:00
Aaron Ramirez
5d54c68f6c Configure SEPolicy to allow PCS to open and use socket connections.
Bug: 299315760
Test: Tested with SEPolicy enforcement on and verified PCS could perform
socket operations.

Change-Id: Idd9048da4bb3856666698bc0589dbc68aa74fd1a
2023-09-11 10:34:11 -07:00
Inseob Kim
dc624c5311 Move camera's coredomain sepolicy to product
Because they are installed to product partition and it's Treble
violation to assign them with vendor sepolicy

Bug: 296512192
Test: lunch panther and build
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:85f9b1e5bc9320a4ab8dc3f6d26027dba76882c6)
Merged-In: I2d2c2a8027eed2b3e2ee1a78d629d44b99867128
Change-Id: I2d2c2a8027eed2b3e2ee1a78d629d44b99867128
2023-09-05 23:51:15 +00:00