cloudy/device_samsung_a32
Watch
1
Fork
You've already forked device_samsung_a32
 0
Code Issues 1 Pull requests Projects Releases Wiki Activity

a32: sepolicy: Update Camera sepolicy

Browse source 
avc:  denied  { call } for  scontext=u:r:hal_camera_default:s0 tcontext=u:r:system_server:s0 tclass=binder permissive=0
This commit is contained in:
AndroidHQ254 2024-05-13 18:30:29 +03:00
commit dd965c5f00
No known key found for this signature in database
GPG key ID: 48008337615EE8A9
4 changed files with 22 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
sepolicy/vendor/cameraserver.te vendored
View file

@ -1,2 +1,5 @@
allow cameraserver hal_graphics_allocator:binder { call transfer };
allow cameraserver hal_camera_default:binder transfer;
get_prop(cameraserver, vendor_sec_camera_prop)
get_prop(cameraserver, sec_camera_prop)

14
sepolicy/vendor/hal_camera_default.te vendored
View file

@ -1,3 +1,8 @@
vndbinder_use(hal_camera_default);
binder_call(hal_camera_default, system_server);
binder_call(system_server, hal_camera_default);
allow hal_camera_default camera_isp_device:chr_file rw_file_perms;
allow hal_camera_default kd_camera_hw_device:chr_file rw_file_perms;
allow hal_camera_default CAM_CAL_DRV_device:chr_file rw_file_perms;
@ -27,10 +32,17 @@ allow hal_camera_default mnt_vendor_file:dir create_dir_perms;
allow hal_camera_default mnt_vendor_file:file create_file_perms;
allow hal_camera_default mnt_vendor_file:fifo_file create_file_perms;
binder_call(hal_camera_default, system_server)
allow hal_camera_default hal_graphics_composer_default:fd use;
allow hal_camera_default hal_graphics_allocator:fd use;
allow hal_camera_default hal_graphics_allocator:binder { call transfer };
allow hal_camera_default cameraserver:fd use;
allow hal_camera_default cameraserver:binder { call transfer };
allow hal_camera_default system_server:binder call;
binder_call(hal_camera_default, hal_graphics_allocator_default)
binder_call(hal_camera_default, mtk_hal_power)
hal_client_domain(hal_camera_default, hal_graphics_allocator)
allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find;
allow hal_camera_default hal_camera_hwservice:hwservice_manager { add find };
allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find;

2
sepolicy/vendor/hal_graphics_allocator.te vendored Normal file
View file

@ -0,0 +1,2 @@
allow hal_graphics_allocator hal_camera_default:binder transfer;
allow hal_graphics_allocator cameraserver:binder transfer;

4
sepolicy/vendor/hal_graphics_composer_default.te vendored
View file

@ -1,3 +1,7 @@
vndbinder_use(hal_graphics_composer_default);
hal_client_domain(hal_graphics_composer_default, hal_graphics_allocator);
get_prop(hal_graphics_composer_default, sec_camera_portrait_prop)
get_prop(hal_graphics_composer_default, vendor_camera_prop);
set_prop(hal_graphics_composer_default, vendor_hwc_prop);