Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Bug] Change the sepolicy name for exo_camera_injection

Browse source 
- Change the sepolicy name from platfrom_app to exo_app.
- Selinux avc log:
E/SELinux: avc:  denied  { find } for interface=vendor.google.exo_camera_injection::IExoCameraInjection sid=u:r:exo_app:s0:c248,c256,c512,c768 pid=11479 scontext=u:r:exo_app:s0:c248,c256,c512,c768 tcontext=u:object_r:hal_exo_camera_injection_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 184736718
Test: Verified exo_camera_injection provider service use cases function as expected; no denials.
Change-Id: I08887b8b6020cb7b3fb3da77cea9a1f453655bea
This commit is contained in:
Cliff Wu 2021-04-07 23:06:18 +08:00
parent dce254b11d
commit c0b806fd2d
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
whitechapel/vendor/google/exo_camera_injection/exo_app.te vendored Normal file
View file

@ -0,0 +1,3 @@
# Allow exo app to find and bind exo camera injection hal.
allow exo_app hal_exo_camera_injection_hwservice:hwservice_manager find;
binder_call(exo_app, hal_exo_camera_injection)

3
whitechapel/vendor/google/exo_camera_injection/platform_app.te vendored
View file

@ -1,3 +0,0 @@
# Allow exo app to find and bind exo camera injection hal.
allow platform_app hal_exo_camera_injection_hwservice:hwservice_manager find;
binder_call(platform_app, hal_exo_camera_injection)