1e74c58ae7
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/22908419 Change-Id: I8bea0257ca6fbec1341283346e81c67748571fc3 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
24 lines
1.1 KiB
Text
24 lines
1.1 KiB
Text
type google_camera_app, domain, coredomain;
|
|
app_domain(google_camera_app)
|
|
net_domain(google_camera_app)
|
|
|
|
allow google_camera_app app_api_service:service_manager find;
|
|
allow google_camera_app audioserver_service:service_manager find;
|
|
allow google_camera_app cameraserver_service:service_manager find;
|
|
allow google_camera_app mediaextractor_service:service_manager find;
|
|
allow google_camera_app mediametrics_service:service_manager find;
|
|
allow google_camera_app mediaserver_service:service_manager find;
|
|
|
|
# Allows GCA to acccess the GXP device and search for the firmware file.
|
|
allow google_camera_app gxp_device:chr_file rw_file_perms;
|
|
allow google_camera_app vendor_fw_file:dir search;
|
|
|
|
# Allows GCA to access the PowerHAL.
|
|
hal_client_domain(google_camera_app, hal_power)
|
|
|
|
# Allows GCA to find and access the EdgeTPU.
|
|
allow google_camera_app edgetpu_app_service:service_manager find;
|
|
allow google_camera_app edgetpu_device:chr_file { getattr read write ioctl map };
|
|
|
|
# Library code may try to access vendor properties, but should be denied
|
|
dontaudit google_camera_app vendor_default_prop:file { getattr map open };
|