Allow camera_app can access priv-app symlinks

Fix: 322417347
Test: make selinux_policy
Change-Id: I467667b3a824a2e8b93e47c61c28ed9015fd44c3
This commit is contained in:
Wilson Sung 2024-02-06 08:36:39 +00:00
parent abb7616f3d
commit 332714ffac
2 changed files with 5 additions and 0 deletions

View file

@ -13,4 +13,6 @@ userdebug_or_eng(`
# Allows GCA_Eng & GCA-Next to access the PowerHAL.
hal_client_domain(debug_camera_app, hal_power)
# Follow priv-app symlinks. This is used for dynamite functionality.
allow debug_camera_app privapp_data_file:lnk_file r_file_perms;
')

View file

@ -14,3 +14,6 @@ hal_client_domain(google_camera_app, hal_power)
# Library code may try to access vendor properties, but should be denied
dontaudit google_camera_app vendor_default_prop:file { getattr map open };
# Follow priv-app symlinks. This is used for dynamite functionality.
allow google_camera_app privapp_data_file:lnk_file r_file_perms;