summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorjrior001 <jriordan001@gmail.com>2018-09-22 22:11:43 -0400
committerjrior001 <jriordan001@gmail.com>2018-09-22 22:11:43 -0400
commit710d0979a13e15d51d8481f0d4e9f5b5ca8c7225 (patch)
treefea116e78859a44a28da2c6248deb72a201db8e4
parent627d16b09d85e68fbd06302bfbfebf1fe659490c (diff)
downloadandroid_device_qcom_sepolicy-710d0979a13e15d51d8481f0d4e9f5b5ca8c7225.tar.gz
android_device_qcom_sepolicy-710d0979a13e15d51d8481f0d4e9f5b5ca8c7225.tar.bz2
android_device_qcom_sepolicy-710d0979a13e15d51d8481f0d4e9f5b5ca8c7225.zip
allow mm-qcamerad to use platform_app fd
* fixes the following denial mm-qcamera-daem: type=1400 audit(0.0:15): avc: denied { use } for path="anon_inode:dmabuf" dev="anon_inodefs" ino=5959 scontext=u:r:mm-qcamerad:s0 tcontext=u:r:platform_app:s0:c512,c768 tclass=fd permissive=0 BUGBASH-2287 Change-Id: I9a4af24d3c4bfafb29b029ead90681bfc370f280
-rw-r--r--legacy-common/mm-qcamerad.te2
1 files changed, 1 insertions, 1 deletions
diff --git a/legacy-common/mm-qcamerad.te b/legacy-common/mm-qcamerad.te
index 4705ccd7..977f0715 100644
--- a/legacy-common/mm-qcamerad.te
+++ b/legacy-common/mm-qcamerad.te
@@ -4,7 +4,7 @@ type_transition mm-qcamerad system_data_file:sock_file camera_socket "cam_socket
type_transition mm-qcamerad system_data_file:sock_file camera_socket "cam_socket2";
allow mm-qcamerad camera_socket:sock_file { create unlink write };
allow mm-qcamerad camera_data_file:sock_file { create unlink };
-
+allow mm-qcamerad platform_app:fd use;
allow mm-qcamerad system_server:unix_stream_socket rw_socket_perms;
allow mm-qcamerad sensorservice_service:service_manager find;