Evolution-X-Tensor/device_google_zuma
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev

Browse source
This commit is contained in:
Krzysztof Kosiński 2023-04-28 22:18:37 +00:00 • committed by Android (Google) Code Review
commit 9f7dec1023
2 changed files with 8 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

7
tracking_denials/google_camera_app.te
View file

@ -1,7 +0,0 @@
# b/264490031
userdebug_or_eng(`
permissive google_camera_app;
')
# b/277300017
dontaudit google_camera_app cameraserver_service:service_manager { find };
dontaudit google_camera_app mediaserver_service:service_manager { find };

16
vendor/google_camera_app.te vendored
View file

@ -1,13 +1,6 @@
type google_camera_app, domain, coredomain; type google_camera_app, domain, coredomain;
app_domain(google_camera_app) app_domain(google_camera_app)
# Allows camera app to access the GXP device.
allow google_camera_app gxp_device:chr_file rw_file_perms;
# Allows camera app to access the PowerHAL.
hal_client_domain(google_camera_app, hal_power)
# Allow camera app to access the a subset of app services.
allow google_camera_app app_api_service:service_manager find; allow google_camera_app app_api_service:service_manager find;
allow google_camera_app audioserver_service:service_manager find; allow google_camera_app audioserver_service:service_manager find;
allow google_camera_app cameraserver_service:service_manager find; allow google_camera_app cameraserver_service:service_manager find;
@ -15,7 +8,14 @@ allow google_camera_app mediaextractor_service:service_manager find;
allow google_camera_app mediametrics_service:service_manager find; allow google_camera_app mediametrics_service:service_manager find;
allow google_camera_app mediaserver_service:service_manager find; allow google_camera_app mediaserver_service:service_manager find;
# Allows GCA to access the EdgeTPU device. # Allows GCA to acccess the GXP device and search for the firmware file.
allow google_camera_app gxp_device:chr_file rw_file_perms;
allow google_camera_app vendor_fw_file:dir search;
# Allows GCA to access the PowerHAL.
hal_client_domain(google_camera_app, hal_power)
# Allows GCA to find and access the EdgeTPU.
allow google_camera_app edgetpu_app_service:service_manager find; allow google_camera_app edgetpu_app_service:service_manager find;
allow google_camera_app edgetpu_device:chr_file { getattr read write ioctl map }; allow google_camera_app edgetpu_device:chr_file { getattr read write ioctl map };