Krzysztof Kosiński
1e74c58ae7
Merge "Enforce sepolicy for Google Camera App." into udc-d1-dev am: 9f7dec1023 am: bc2fb0e761 am: de77c8b0ac
...
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22908419
Change-Id: I8bea0257ca6fbec1341283346e81c67748571fc3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2023-04-29 01:12:25 +00:00
Krzysztof Kosiński
5b2134d5c5
Enforce sepolicy for Google Camera App.
...
Added missing statement allowing GXP firmware access.
Bug: 264489778
Test: GCA smoke test in setenforce mode.
Change-Id: Ied2f675a2e11f7aebcf4e1e6ac49fc2e39dd2ecf
2023-04-27 19:53:25 +00:00
Lawrence Huang
e979543b99
Add net_domain for GCA on zuma devices
...
Bug: 277097939
Change-Id: Iadfc1be5f9e6830693aed9d9b619815c7d1f9caf
2023-04-26 01:41:33 +00:00
Dinesh Yadav
b8b2445251
Add se-policies for google_camera_app from pro
...
- Found selinux violations on google_camera_app for these services which are fixed after these changes are included.
Bug: 264490031
Change-Id: Ib6f4a8a548425b0b98ed9b69edff6c973b9cbe3e
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-04-14 03:59:03 +00:00
Dinesh Yadav
478b11708f
Allow google_camera_app to access edgetpu
...
These permissions are needed by GCA-release & GCA-dogfood to access
edgetpu.
Bug: 264490031
Change-Id: Idd9dff906c86f9e83f1dc67698c23387e174d99c
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-04-04 06:11:47 +00:00
Andy Hsu
9c91ba1a2f
Add SELinux policy to allow GCARelease and GCADogfood to access PowerHAL.
...
Note that this only adds permission to GCARelease and GCADogfood, while GCANext and GCAEng are still untrusted app on zuma now and after this change GCANext and GCAEng will still be denied.
Bug: 264490031
Test: Portrait processing in GCARelease didn't get denial message when accessing PowerHAL after this change (https://cnsviewer-static.corp.google.com/cns/md-d/home/pixel-camera-data-readers/acat/hwandy/ag/22215364?user=pixel-camera-data-readers ).
Change-Id: Ia4a4c2f24215b9da9db7985cf67112997df355fa
2023-03-23 06:41:13 +00:00
Dinesh Yadav
b068bb3f64
Allow camera HAL and GCA to access GXP device.
...
The camera HAL and Google Camera App
need selinux permission to run workloads on Aurora DSP. This
change adds the selinux rules too allow these clients to
access the GXP device in order to execute workloads on DSP.
Bug: 264321380
Test: Verified that the camera HAL service and GCA app is able to access the GXP device.
Change-Id: I125650b4841b4cbdc50077a0d80b113b02699de8
2023-01-17 03:21:04 +00:00
Adam Shih
1774ec056b
restart domain
...
Bug: 254378739
Test: boot to home
Change-Id: I776bf6fa66605a4c3a888f2362b79fa1e0ec122a
2022-12-08 09:55:57 +08:00
Cyan Hsieh
fe97b2df7a
Revert "restart domain"
...
This reverts commit be714f6fa3
2022-12-07 04:41:58 +00:00
Adam Shih
be714f6fa3
restart domain
...
Bug: 254378739
Test: boot to home
Change-Id: I63a3e22ccbee16dd3f186e76fa698d2e7454c057
2022-12-07 09:48:15 +08:00
Adam Shih
fc41e82939
remove edgeTPU folder
...
Bug: 258114806
Test: build pass
Change-Id: Ic9eb7f671ef3ede2da40e0ec40b0bb0646240924
2022-11-09 12:39:09 +08:00
