diff options
| author | jrior001 <jriordan001@gmail.com> | 2018-10-07 12:53:00 -0400 |
|---|---|---|
| committer | jrior001 <jriordan001@gmail.com> | 2018-10-07 13:30:49 -0400 |
| commit | 9e8c82f18d6a5781dc369f5e2aa5ba125d1ceca1 (patch) | |
| tree | dd52a713bca4e6fea69af454957ced80d8c4e388 | |
| parent | dca3374c08ac49eb2e842e8279e61f0801c2080c (diff) | |
| download | android_device_qcom_sepolicy-9e8c82f18d6a5781dc369f5e2aa5ba125d1ceca1.tar.gz android_device_qcom_sepolicy-9e8c82f18d6a5781dc369f5e2aa5ba125d1ceca1.tar.bz2 android_device_qcom_sepolicy-9e8c82f18d6a5781dc369f5e2aa5ba125d1ceca1.zip | |
mm-qcamerad: move move snap_app:fd use perms to common
* more than just legacy needs this
Change-Id: Id345d69835f495d9ca6813d6ea55433631e53c97
| -rw-r--r-- | common/mm-qcamerad.te | 2 | ||||
| -rw-r--r-- | legacy-common/mm-qcamerad.te | 1 |
2 files changed, 1 insertions, 2 deletions
diff --git a/common/mm-qcamerad.te b/common/mm-qcamerad.te index 70e14d11..800acccf 100644 --- a/common/mm-qcamerad.te +++ b/common/mm-qcamerad.te @@ -40,7 +40,7 @@ allow mm-qcamerad self:process execmem; allow mm-qcamerad video_device:dir r_dir_perms; allow mm-qcamerad { gpu_device video_device sensors_device }:chr_file rw_file_perms; -allow mm-qcamerad { surfaceflinger mediaserver cameraserver hal_camera untrusted_app_all priv_app }:fd use; +allow mm-qcamerad { surfaceflinger mediaserver cameraserver hal_camera untrusted_app_all priv_app snap_app }:fd use; allow mm-qcamerad camera_data_file:dir w_dir_perms; #allow mm-qcamerad camera_data_file:sock_file { create unlink }; diff --git a/legacy-common/mm-qcamerad.te b/legacy-common/mm-qcamerad.te index e3ba8cbe..01078043 100644 --- a/legacy-common/mm-qcamerad.te +++ b/legacy-common/mm-qcamerad.te @@ -4,7 +4,6 @@ type_transition mm-qcamerad system_data_file:sock_file camera_socket "cam_socket type_transition mm-qcamerad system_data_file:sock_file camera_socket "cam_socket2"; allow mm-qcamerad camera_socket:sock_file { create unlink write }; allow mm-qcamerad camera_data_file:sock_file { create unlink }; -allow mm-qcamerad snap_app:fd use; allow mm-qcamerad system_server:unix_stream_socket rw_socket_perms; allow mm-qcamerad sensorservice_service:service_manager find; |