1 allow hal_camera self:capability sys_nice; 2 3 allow hal_camera gpu_device:chr_file rw_file_perms; 4 5 # access to /dev/input/event{5,10} 6 allow hal_camera input_device:dir r_dir_perms; 7 allow hal_camera input_device:chr_file r_file_perms; 8 9 set_prop(hal_camera, camera_prop) 10 get_prop(hal_camera, vendor_ro_camera_prop) 11 12 #allow hal_camera sysfs_enable_ps_sensor:file w_file_perms; 13 r_dir_file(hal_camera, sysfs_type) 14 # find libraries 15 allow hal_camera system_file:dir r_dir_perms; 16 17 allow hal_camera qdisplay_service:service_manager find; 18 19 # talk to system_server 20 21 allow hal_camera system_server:unix_stream_socket { read write }; 22 23 allow hal_camera self:socket { create ioctl read write }; 24 25 # Grant access to Qualcomm MSM Interface (QMI) radio sockets 26 # qmux_socket(hal_camera) 27 28 # allow hal_camera to call some socket ioctls 29 allowxperm hal_camera self:socket ioctl { IPC_ROUTER_IOCTL_LOOKUP_SERVER IPC_ROUTER_IOCTL_BIND_CONTROL_PORT }; 30 31 # ignore spurious denial 32 dontaudit hal_camera graphics_device:dir search; 33 34 userdebug_or_eng(` 35 allow hal_camera diag_device:chr_file rw_file_perms; 36 ') 37 38 # access easel dev nodes 39 allow hal_camera easel_device:chr_file { read write ioctl open getattr }; 40 allow hal_camera sysfs_easel:file rw_file_perms; 41 42 # access hexagon 43 allow hal_camera qdsp_device:chr_file r_file_perms; 44 45 # lens calibration file 46 allow hal_camera persist_file:dir search; 47 allow hal_camera persist_sensors_file:dir search; 48 allow hal_camera persist_sensors_file:file { getattr open read }; 49
