51c91e5bdf
Test: 05-05 05:07:06.652 4616 4616 W FinishThread: type=1400 audit(0.0:24): avc: denied { read write } for name="video12" dev="tmpfs" ino=646 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:video_device:s0 tclass=chr_file permissive=0 app=com.google.android.GoogleCameraEng
05-08 22:00:59.000 7323 7323 I FinishThread: type=1400 audit(0.0:36): avc: denied { read } for name="lib_jpg_encoder.so"
dev="dm-45" ino=25639 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_data_file:s0 tcl
ass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:00:59.000 7323 7323 I FinishThread: type=1400 audit(0.0:37): avc: denied { open } for path="/vendor/lib64/lib_j
pg_encoder.so" dev="dm-45" ino=25639 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_da
ta_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:46:00.260 4784 4784 I FinishThread: type=1400 audit(0.0:29): avc: denied { execute } for path="/vendor/lib64/
libhwjpeg.so" dev="dm-50" ino=55596 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera_d
ata_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:33:30.504 7436 7436 I FinishThread: type=1400 audit(0.0:36): avc: denied { getattr } for path="/vendor/lib64/
lib_jpg_encoder.so" dev="dm-50" ino=53765 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_ca
mera_data_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
05-08 22:33:30.504 7436 7436 I FinishThread: type=1400 audit(0.0:37): avc: denied { map } for path="/vendor/lib64/lib_
jpg_encoder.so" dev="dm-50" ino=53765 scontext=u:r:debug_camera_app:s0:c32,c257,c512,c768 tcontext=u:object_r:vendor_camera
_data_file:s0 tclass=file permissive=1 app=com.google.android.GoogleCameraEng
binder:7312_2: type=1400 audit(0.0:18): avc: denied { read write } for name="video12" dev="tmpfs" ino=680 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1
05-08 22:28:37.692 7312 7312 I binder:7312_2: type=1400 audit(0.0:19): avc: denied { open } for path="/dev/video12" dev="tmpfs" ino=680 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1
05-08 22:28:37.692 7312 7312 I binder:7312_2: type=1400 audit(0.0:20): avc: denied { ioctl } for path="/dev/video12" dev="tmpfs" ino=680 ioctlcmd=0x5600 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hw_jpg_device:s0 tclass=chr_file permissive=1
05-08 22:28:37.700 7312 7312 I binder:7312_2: type=1400 audit(0.0:21): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=167 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=1
Bug: 267820687
Change-Id: I69f502d721f683d3532038d618f5fafc83f38b6b
26 lines
1.1 KiB
Text
26 lines
1.1 KiB
Text
type debug_camera_app, domain, coredomain;
|
|
|
|
userdebug_or_eng(`
|
|
app_domain(debug_camera_app)
|
|
net_domain(debug_camera_app)
|
|
|
|
allow debug_camera_app app_api_service:service_manager find;
|
|
allow debug_camera_app audioserver_service:service_manager find;
|
|
allow debug_camera_app cameraserver_service:service_manager find;
|
|
allow debug_camera_app mediaextractor_service:service_manager find;
|
|
allow debug_camera_app mediametrics_service:service_manager find;
|
|
allow debug_camera_app mediaserver_service:service_manager find;
|
|
|
|
# Allows GCA-Eng & GCA-Next access the GXP device.
|
|
allow debug_camera_app gxp_device:chr_file rw_file_perms;
|
|
|
|
# Allows GCA-Eng & GCA-Next to find and access the EdgeTPU.
|
|
allow debug_camera_app edgetpu_app_service:service_manager find;
|
|
allow debug_camera_app edgetpu_device:chr_file { getattr read write ioctl map };
|
|
|
|
# Allows GCA_Eng & GCA-Next to access the PowerHAL.
|
|
hal_client_domain(debug_camera_app, hal_power)
|
|
|
|
# Allows GCA_Eng & GCA-Next to access the hw_jpeg /dev/video12.
|
|
allow debug_camera_app hw_jpg_device:chr_file rw_file_perms;
|
|
')
|