100dd2387d
gxp_logging service will periodically check the sysfs files exposed by the gxp kernel driver and report stats to Suez framework. These policies are needed to report the metrics. Tested: Found no violation with these policies on a P23 device Bug: 278514198 Change-Id: I8c3e57dfe4e9a6caab425f2424d07e83f5e7b9c6 Signed-off-by: Dinesh Yadav <dkyadav@google.com>
27 lines
1.1 KiB
Text
27 lines
1.1 KiB
Text
type debug_camera_app, domain, coredomain;
|
|
|
|
userdebug_or_eng(`
|
|
app_domain(debug_camera_app)
|
|
net_domain(debug_camera_app)
|
|
|
|
allow debug_camera_app app_api_service:service_manager find;
|
|
allow debug_camera_app audioserver_service:service_manager find;
|
|
allow debug_camera_app cameraserver_service:service_manager find;
|
|
allow debug_camera_app mediaextractor_service:service_manager find;
|
|
allow debug_camera_app mediametrics_service:service_manager find;
|
|
allow debug_camera_app mediaserver_service:service_manager find;
|
|
|
|
# Allows GCA-Eng & GCA-Next access the GXP device and properties.
|
|
allow debug_camera_app gxp_device:chr_file rw_file_perms;
|
|
get_prop(debug_camera_app, vendor_gxp_prop)
|
|
|
|
# Allows GCA-Eng & GCA-Next to find and access the EdgeTPU.
|
|
allow debug_camera_app edgetpu_app_service:service_manager find;
|
|
allow debug_camera_app edgetpu_device:chr_file { getattr read write ioctl map };
|
|
|
|
# Allows GCA_Eng & GCA-Next to access the PowerHAL.
|
|
hal_client_domain(debug_camera_app, hal_power)
|
|
|
|
# Allows GCA_Eng & GCA-Next to access the hw_jpeg /dev/video12.
|
|
allow debug_camera_app hw_jpg_device:chr_file rw_file_perms;
|
|
')
|