diff options
author | Nirmal Abraham <nabrah@codeaurora.org> | 2017-11-16 16:04:52 +0530 |
---|---|---|
committer | Michael Bestas <mkbestas@lineageos.org> | 2018-04-20 18:40:47 +0300 |
commit | d7045fa985b475f51314316d43d28e273646159f (patch) | |
tree | 20f66b1ceb4edce0d6ebf77680b328aabf2e755a | |
parent | 00dc45f95cd215f4f930670f234d5645b8a4def6 (diff) | |
download | android_device_qcom_sepolicy-d7045fa985b475f51314316d43d28e273646159f.tar.gz android_device_qcom_sepolicy-d7045fa985b475f51314316d43d28e273646159f.tar.bz2 android_device_qcom_sepolicy-d7045fa985b475f51314316d43d28e273646159f.zip |
sepolicy: rules to allow camera daemon access to app buffer
Add rule to allow mm-qcamera daemon to import the fd which
is allocated in app's context.
Change-Id: Icdc13cf34cef98a2529b79ee61900b5130585b0d
sepolicy: Allow camera daemon to access priv_app buffer.
Add rule to allow mm-qcamera daemon to import the fd which
is allocated in app's context. This is required for VT call
camera preview to work.
Change-Id: Iea4d82a44f42715ca888960549494e788dd99563
CRs-Fixed: 2133945
[mikeioannina]: Move to common sepolicy
Change-Id: I6e1c48df94b31132f5b1f9afa3a07ccc3c4aab4d
-rw-r--r-- | common/mm-qcamerad.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/common/mm-qcamerad.te b/common/mm-qcamerad.te index 687e8094..52134947 100644 --- a/common/mm-qcamerad.te +++ b/common/mm-qcamerad.te @@ -40,7 +40,7 @@ allow mm-qcamerad self:process execmem; allow mm-qcamerad video_device:dir r_dir_perms; allow mm-qcamerad { gpu_device video_device sensors_device }:chr_file rw_file_perms; -allow mm-qcamerad { surfaceflinger mediaserver cameraserver hal_camera }:fd use; +allow mm-qcamerad { surfaceflinger mediaserver cameraserver hal_camera untrusted_app_all priv_app }:fd use; allow mm-qcamerad camera_data_file:dir w_dir_perms; #allow mm-qcamerad camera_data_file:sock_file { create unlink }; |