diff --git a/sepolicy/cameraserver.te b/sepolicy/cameraserver.te index a7a5baf..3cd205d 100644 --- a/sepolicy/cameraserver.te +++ b/sepolicy/cameraserver.te @@ -1 +1,13 @@ +allow cameraserver csc_prop:file { getattr open read }; + +allow cameraserver hal_perf_default:binder call; +allow cameraserver hal_perf_hwservice:hwservice_manager find; + +allow cameraserver mm-qcamerad:unix_dgram_socket sendto; + allow cameraserver sec_camera_prop:file { getattr open read }; +allow cameraserver sec_camera_prop:property_service set; + +allow cameraserver sysfs_camera_writable:dir search; +allow cameraserver sysfs_camera_writable:file { getattr open read }; +allow cameraserver sysfs:file { getattr open read write }; diff --git a/sepolicy/hal_camera_default.te b/sepolicy/hal_camera_default.te index 8639341..5c66ba0 100644 --- a/sepolicy/hal_camera_default.te +++ b/sepolicy/hal_camera_default.te @@ -1,6 +1,10 @@ allow hal_camera_default camera_data_file:sock_file write; +allow hal_camera_default csc_prop:file { getattr open read }; + +allow hal_camera_default sec_camera_prop:file { getattr open read }; +allow hal_camera_default sec_camera_prop:property_service set; + allow hal_camera_default sysfs_camera_writable:dir search; allow hal_camera_default sysfs_camera_writable:file { getattr open read }; - -allow hal_camera_default sec_camera_prop:file { getattr open read }; +allow hal_camera_default sysfs:file { getattr open read write };