device_google_gs201/whitechapel_pro/rlsservice.te
Xu Han 9633922461 Fix rlsserive selinux denials
Bug: 213817228
Test: check "avc denied" log with camera streaming.
Change-Id: Id255ffab3ca145cb0708b701e2afccdcd76ef4ea
2022-01-14 10:22:40 -08:00

30 lines
904 B
Text

type rlsservice, domain;
type rlsservice_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(rlsservice)
vndbinder_use(rlsservice)
add_service(rlsservice, rls_service)
# access rainbow sensor calibration files
allow rlsservice persist_file:dir search;
allow rlsservice persist_camera_file:dir search;
allow rlsservice persist_camera_file:file r_file_perms;
allow rlsservice mnt_vendor_file:dir search;
# access device files
allow rlsservice rls_device:chr_file rw_file_perms;
binder_call(rlsservice, hal_camera_default)
# Allow access to display backlight information
allow rlsservice sysfs_leds:dir search;
allow rlsservice sysfs_leds:file r_file_perms;
# Allow access to always-on compute device node
allow rlsservice device:dir r_file_perms;
allow rlsservice aoc_device:chr_file rw_file_perms;
# For observing apex file changes
allow rlsservice apex_info_file:file r_file_perms;