1f12b7b750
git-subtree-dir: sepolicy git-subtree-mainline:5ac4bfe691git-subtree-split:8c9dd0dbcdChange-Id: If7ab7a231c42edd022de4786d0e0d92c6e77eef0
19 lines
872 B
Text
19 lines
872 B
Text
typeattribute google_camera_app coredomain;
|
|
app_domain(google_camera_app)
|
|
net_domain(google_camera_app)
|
|
|
|
allow google_camera_app app_api_service:service_manager find;
|
|
allow google_camera_app audioserver_service:service_manager find;
|
|
allow google_camera_app cameraserver_service:service_manager find;
|
|
allow google_camera_app mediaextractor_service:service_manager find;
|
|
allow google_camera_app mediametrics_service:service_manager find;
|
|
allow google_camera_app mediaserver_service:service_manager find;
|
|
|
|
# Allows GCA to access the PowerHAL.
|
|
hal_client_domain(google_camera_app, hal_power)
|
|
|
|
# Library code may try to access vendor properties, but should be denied
|
|
dontaudit google_camera_app vendor_default_prop:file { getattr map open };
|
|
|
|
# Follow priv-app symlinks. This is used for dynamite functionality.
|
|
allow google_camera_app privapp_data_file:lnk_file r_file_perms;
|