8c979899cc
In order to access the darwinn metrics library from the google camera app (product partition), we need to create an SELinux exception for the related shared library (in vendor) it uses. This CL adds the same_process_hal_file tag to allow this exception. Bug: 190661153, 151063663 Test: App can load the .so and not crash after this change. Before: No permission to access namespace. (https://paste.googleplex.com/6602755121610752) After: GCA doesn't crash on load. Change-Id: I8671732184bbbe283c94d1acd3bb1ff397fe651c
27 lines
1.4 KiB
Text
27 lines
1.4 KiB
Text
# EdgeTPU logging service
|
|
/vendor/bin/hw/android\.hardware\.edgetpu\.logging@service-edgetpu-logging u:object_r:edgetpu_logging_exec:s0
|
|
|
|
# EdgeTPU device (DarwiNN)
|
|
/dev/abrolhos u:object_r:edgetpu_device:s0
|
|
|
|
# EdgeTPU service binaries and libraries
|
|
/system_ext/bin/hw/vendor\.google\.edgetpu_app_service@1\.0-service u:object_r:edgetpu_app_server_exec:s0
|
|
/vendor/lib64/com\.google\.edgetpu_app_service-V1-ndk_platform\.so u:object_r:same_process_hal_file:s0
|
|
/vendor/lib64/libedgetpu_client\.google\.so u:object_r:same_process_hal_file:s0
|
|
|
|
# EdgeTPU vendor service
|
|
/vendor/bin/hw/vendor\.google\.edgetpu_vendor_service@1\.0-service u:object_r:edgetpu_vendor_server_exec:s0
|
|
/vendor/lib64/com\.google\.edgetpu_vendor_service-V1-ndk_platform\.so u:object_r:same_process_hal_file:s0
|
|
|
|
# EdgeTPU runtime libraries
|
|
/vendor/lib64/libedgetpu_util\.so u:object_r:same_process_hal_file:s0
|
|
|
|
# EdgeTPU data files
|
|
/data/vendor/edgetpu(/.*)? u:object_r:edgetpu_vendor_service_data_file:s0
|
|
/data/vendor/hal_neuralnetworks_darwinn(/.*)? u:object_r:hal_neuralnetworks_darwinn_data_file:s0
|
|
|
|
# NeuralNetworks file contexts
|
|
/vendor/bin/hw/android\.hardware\.neuralnetworks@service-darwinn-aidl u:object_r:hal_neuralnetworks_darwinn_exec:s0
|
|
|
|
# EdgeTPU metrics logging service.
|
|
/vendor/lib64/libmetrics_logger\.so u:object_r:same_process_hal_file:s0
|