From e4e930185ad7c32499bc7de80dd2fb2ee77e257c Mon Sep 17 00:00:00 2001 From: Martin Liu Date: Wed, 29 Mar 2023 17:17:11 +0800 Subject: [PATCH] Add sepolicies for gcma_camera heaps Bug: 275481134 Test: launch camera Change-Id: I2efe897826d3c32bb85c815207865c0db557ea9f Signed-off-by: Martin Liu --- vendor/device.te | 1 + vendor/file_contexts | 2 ++ vendor/hal_graphics_allocator_default.te | 1 + 3 files changed, 4 insertions(+) diff --git a/vendor/device.te b/vendor/device.te index 0c93859c..752d27e7 100644 --- a/vendor/device.te +++ b/vendor/device.te @@ -14,6 +14,7 @@ type sensor_direct_heap_device, dmabuf_heap_device_type, dev_type; type faceauth_heap_device, dmabuf_heap_device_type, dev_type; type vscaler_secure_heap_device, dmabuf_heap_device_type, dev_type; type framebuffer_secure_heap_device, dmabuf_heap_device_type, dev_type; +type gcma_camera_heap_device, dmabuf_heap_device_type, dev_type; # SecureElement SPI device type st54spi_device, dev_type; diff --git a/vendor/file_contexts b/vendor/file_contexts index a9cd28c4..d07522cf 100644 --- a/vendor/file_contexts +++ b/vendor/file_contexts @@ -183,6 +183,8 @@ /dev/dma_heap/vframe-secure u:object_r:dmabuf_system_secure_heap_device:s0 /dev/dma_heap/vscaler-secure u:object_r:vscaler_secure_heap_device:s0 /dev/dma_heap/vstream-secure u:object_r:dmabuf_system_secure_heap_device:s0 +/dev/dma_heap/gcma_camera u:object_r:gcma_camera_heap_device:s0 +/dev/dma_heap/gcma_camera-uncached u:object_r:gcma_camera_heap_device:s0 /dev/uci u:object_r:uci_device:s0 # Raw HID device diff --git a/vendor/hal_graphics_allocator_default.te b/vendor/hal_graphics_allocator_default.te index 628329b5..b624db1c 100644 --- a/vendor/hal_graphics_allocator_default.te +++ b/vendor/hal_graphics_allocator_default.te @@ -3,3 +3,4 @@ allow hal_graphics_allocator_default faceauth_heap_device:chr_file r_file_perms; allow hal_graphics_allocator_default dmabuf_system_secure_heap_device:chr_file r_file_perms; allow hal_graphics_allocator_default vscaler_secure_heap_device:chr_file r_file_perms; allow hal_graphics_allocator_default framebuffer_secure_heap_device:chr_file r_file_perms; +allow hal_graphics_allocator_default gcma_camera_heap_device:chr_file r_file_perms;