diff options
| author | Daniel Hillenbrand <codeworkx@cyanogenmod.org> | 2013-08-11 17:31:09 +0200 |
|---|---|---|
| committer | slayher <layhertony@gmail.com> | 2013-08-11 11:57:39 -0400 |
| commit | 37816680ae87eb64759334bdee23514bf10c64d6 (patch) | |
| tree | d5a462fcebefe088f0560d033a641df330ebeac0 /selinux | |
| parent | 69a9bae3873476afcc67da7387ca9a8aa2236b43 (diff) | |
| download | device_samsung_t0lte-37816680ae87eb64759334bdee23514bf10c64d6.tar.gz device_samsung_t0lte-37816680ae87eb64759334bdee23514bf10c64d6.tar.bz2 device_samsung_t0lte-37816680ae87eb64759334bdee23514bf10c64d6.zip | |
t0lte: allow mediaserver to rw /data/ISP_CV for camera and to access exynos-mem
Change-Id: I87def35cbe4ad60af66b5e6e374f7aebfd11742b
Diffstat (limited to 'selinux')
| -rw-r--r-- | selinux/file.te | 3 | ||||
| -rw-r--r-- | selinux/file_contexts | 4 | ||||
| -rw-r--r-- | selinux/mediaserver.te | 3 |
3 files changed, 8 insertions, 2 deletions
diff --git a/selinux/file.te b/selinux/file.te index 89c3352..3f045f6 100644 --- a/selinux/file.te +++ b/selinux/file.te @@ -4,6 +4,7 @@ type firmware_mfc, file_type; type firmware_camera, file_type; type qmuxd_socket, file_type; +type camera_data_file, file_type, data_file_type; type kickstart_data_file, file_type, data_file_type; type sensors_data_file, file_type, data_file_type; -type volume_data_file, file_type, data_file_type;
\ No newline at end of file +type volume_data_file, file_type, data_file_type; diff --git a/selinux/file_contexts b/selinux/file_contexts index 839e068..b3aedb5 100644 --- a/selinux/file_contexts +++ b/selinux/file_contexts @@ -23,6 +23,10 @@ /dev/akm8963 u:object_r:sensors_device:s0 /efs/gyro_cal_data u:object_r:sensors_data_file:s0 +# Camera +/data/ISP_CV u:object_r:camera_data_file:s0 +/dev/exynos-mem u:object_r:video_device:s0 + # for wpa_supp /dev/rfkill u:object_r:rfkill_device:s0 diff --git a/selinux/mediaserver.te b/selinux/mediaserver.te index 7ad89ef..5e97189 100644 --- a/selinux/mediaserver.te +++ b/selinux/mediaserver.te @@ -1,5 +1,6 @@ qmux_socket(mediaserver) allow mediaserver self:socket create_socket_perms; allow mediaserver { firmware_camera }:file r_file_perms; +allow mediaserver camera_data_file:file rw_file_perms; allow mediaserver volume_data_file:file create_file_perms; -allow mediaserver volume_data_file:dir create_dir_perms;
\ No newline at end of file +allow mediaserver volume_data_file:dir create_dir_perms; |