- Add policies for GCA-Eng to access GXP device.
- Allow GCA-Eng to access edgetpu service.
Test: Build selinux and test GCA-Eng on device with
adb shell setprop camera.artemis_dsp TRUE
Bug: 230773733
Change-Id: I8d04f6e1aef0899b3862ddbb80174cd086156d92
This change includes the google_camera_app domain
into the EdgeTPU selinux rules. With it the GCA
is now able to access EdgeTPU.
Bug: 221020793
Test: verified GCA to work on P22.
Change-Id: I69010e2a8cca1429df402ae587b939d38e20a287
For the logging service to access sysfs, the sysfs needs to be included in the sysfs_edgetpu group. This CL makes gs201 sepolicy on par with the gs101 version, by including janeiro (PRO) in the gs201 setup.
gs101 genfs file: https://source.corp.google.com/sc-dev/device/google/gs101-sepolicy/edgetpu/genfs_contexts;l=2?q=sysfs_edgetpu&ct=os
Bug: 196105736
Test: Restarted logging service on cloudripper. No AVC denial.
Change-Id: I4d5fa33e1110c28904f7fffea0024d7688387b11
Reuse the same SEPolicy for edgetpu gs101 for gs201.
1. gs101 sepolicy has been refactored into an edgetpu directory, which
is meant to be reused. We only need to match the gs201 side to mirror
that. This CL references Adam's ag/14911633.
2. In a separete CL, add /dev/janeiro into the common gs101 sepolicy.
Bug: 191185522
Test: run_tflite_test_odc passes.
https://paste.googleplex.com/5466657955774464
Change-Id: Idd9e47a3c8da70f9dd4696cb7db7d4439e9897d6
