1e5b6fb9eb
This permission is needed for tachyon service to call callbacks.
AVC Error seen when tachyon tries accessing GCA:
12-02 11:40:03.212 6987 6987 W com.google.edge: type=1400 audit(0.0:17): avc: denied { call } for scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:google_camera_app:s0:c145,c256,c512,c768 tclass=binder permissive=0
12-03 07:12:26.424 4166 4166 W com.google.edge: type=1400 audit(0.0:254): avc: denied { call } for scontext=u:r:edgetpu_tachyon_server:s0 tcontext=u:r:debug_camera_app:s0:c67,c257,c512,c768 tclass=binder permissive=0
Bug: 381787911
Flag: EXEMPT updates device sepolicy only
Change-Id: Iaa61d70cdffb75024c497482f4c0a6cab493bec3
13 lines
595 B
Text
13 lines
595 B
Text
# Allows GCA to acccess the GXP device & properties.
|
|
allow google_camera_app gxp_device:chr_file rw_file_perms;
|
|
get_prop(google_camera_app, vendor_gxp_prop)
|
|
|
|
# Allows GCA to find and access the EdgeTPU.
|
|
allow google_camera_app edgetpu_app_service:service_manager find;
|
|
allow google_camera_app edgetpu_device:chr_file { getattr read write ioctl map };
|
|
|
|
# Allows GCA to access the hw_jpeg /dev/video12.
|
|
allow google_camera_app hw_jpg_device:chr_file rw_file_perms;
|
|
|
|
# Allows tachyon service to communicate with google_camera_app via binder.
|
|
binder_call(edgetpu_tachyon_server, google_camera_app);
|