The camera HAL and Google Camera App need selinux permission to run workloads on Aurora DSP. This change adds the selinux rules too allow these clients to access the GXP device and load firmware onto DSP cores in order to execute workloads on DSP. Bug: 220086991 Test: Verified that the camera HAL service and GCA app is able to access the GXP device and load GXP firmware. Change-Id: I1bd327cfbe5b37c88154acda54bf6c396e939289
15 lines
683 B
Text
15 lines
683 B
Text
type google_camera_app, domain, coredomain;
|
|
app_domain(google_camera_app)
|
|
|
|
allow google_camera_app app_api_service:service_manager find;
|
|
allow google_camera_app audioserver_service:service_manager find;
|
|
allow google_camera_app cameraserver_service:service_manager find;
|
|
allow google_camera_app mediaextractor_service:service_manager find;
|
|
allow google_camera_app mediametrics_service:service_manager find;
|
|
allow google_camera_app mediaserver_service:service_manager find;
|
|
|
|
# Allows camera app to access the GXP device.
|
|
allow google_camera_app gxp_device:chr_file rw_file_perms;
|
|
|
|
# Allows camera app to search for GXP firmware file.
|
|
allow google_camera_app vendor_fw_file:dir search;
|