To fix the denial message: avc: denied { find } for pid=4646 uid=10134 name=android.hardware.power.IPower/default scontext=u:r:google_camera_app:s0:c134,c256,c512,c768 tcontext=u:object_r:hal_power_service:s0 tclass=service_manager permissive=0 Reference: go/sepolicy. On P21, we have ag/14692156 to access PowerHAL in GCA. On P22, we currently don't have the permission (b/233998391#comment10). This change fixes this issue. Bug: 233998391 Bug: 232184722 Bug: 232022128 Test: Boost is applied successfully b/233998391#comment11. GCA. Change-Id: Id1a938fc0af0ad9280aa49e7f6cbdf45c16f8b38
18 lines
776 B
Text
18 lines
776 B
Text
type google_camera_app, domain, coredomain;
|
|
app_domain(google_camera_app)
|
|
|
|
allow google_camera_app app_api_service:service_manager find;
|
|
allow google_camera_app audioserver_service:service_manager find;
|
|
allow google_camera_app cameraserver_service:service_manager find;
|
|
allow google_camera_app mediaextractor_service:service_manager find;
|
|
allow google_camera_app mediametrics_service:service_manager find;
|
|
allow google_camera_app mediaserver_service:service_manager find;
|
|
|
|
# Allows camera app to access the GXP device.
|
|
allow google_camera_app gxp_device:chr_file rw_file_perms;
|
|
|
|
# Allows camera app to search for GXP firmware file.
|
|
allow google_camera_app vendor_fw_file:dir search;
|
|
|
|
# Allows camera app to access the PowerHAL.
|
|
hal_client_domain(google_camera_app, hal_power)
|