summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNirmal Abraham <nabrah@codeaurora.org>2017-11-16 16:04:52 +0530
committerMichael Bestas <mkbestas@lineageos.org>2018-04-20 18:40:47 +0300
commitd7045fa985b475f51314316d43d28e273646159f (patch)
tree20f66b1ceb4edce0d6ebf77680b328aabf2e755a
parent00dc45f95cd215f4f930670f234d5645b8a4def6 (diff)
downloadandroid_device_qcom_sepolicy-d7045fa985b475f51314316d43d28e273646159f.tar.gz
android_device_qcom_sepolicy-d7045fa985b475f51314316d43d28e273646159f.tar.bz2
android_device_qcom_sepolicy-d7045fa985b475f51314316d43d28e273646159f.zip
sepolicy: rules to allow camera daemon access to app buffer
Add rule to allow mm-qcamera daemon to import the fd which is allocated in app's context. Change-Id: Icdc13cf34cef98a2529b79ee61900b5130585b0d sepolicy: Allow camera daemon to access priv_app buffer. Add rule to allow mm-qcamera daemon to import the fd which is allocated in app's context. This is required for VT call camera preview to work. Change-Id: Iea4d82a44f42715ca888960549494e788dd99563 CRs-Fixed: 2133945 [mikeioannina]: Move to common sepolicy Change-Id: I6e1c48df94b31132f5b1f9afa3a07ccc3c4aab4d
-rw-r--r--common/mm-qcamerad.te2
1 files changed, 1 insertions, 1 deletions
diff --git a/common/mm-qcamerad.te b/common/mm-qcamerad.te
index 687e8094..52134947 100644
--- a/common/mm-qcamerad.te
+++ b/common/mm-qcamerad.te
@@ -40,7 +40,7 @@ allow mm-qcamerad self:process execmem;
allow mm-qcamerad video_device:dir r_dir_perms;
allow mm-qcamerad { gpu_device video_device sensors_device }:chr_file rw_file_perms;
-allow mm-qcamerad { surfaceflinger mediaserver cameraserver hal_camera }:fd use;
+allow mm-qcamerad { surfaceflinger mediaserver cameraserver hal_camera untrusted_app_all priv_app }:fd use;
allow mm-qcamerad camera_data_file:dir w_dir_perms;
#allow mm-qcamerad camera_data_file:sock_file { create unlink };