1 # communicate with perfd 2 allow cameraserver perfd_data_file:dir search; 3 allow cameraserver perfd:unix_stream_socket connectto; 4 allow cameraserver perfd_data_file:sock_file write; 5 6 # communicate with camera 7 allow cameraserver camera:unix_dgram_socket sendto; 8 allow cameraserver camera_data_file:sock_file write; 9 allow cameraserver camera_device:chr_file rw_file_perms; 10 11 allow cameraserver gpu_device:chr_file rw_file_perms; 12 13 # access to /dev/input/event{5,10} 14 allow cameraserver input_device:dir r_dir_perms; 15 allow cameraserver input_device:chr_file r_file_perms; 16 17 set_prop(cameraserver, camera_prop) 18 19 allow cameraserver sysfs_enable_ps_sensor:file w_file_perms; 20 r_dir_file(cameraserver, sysfs_type) 21 # find libraries 22 allow cameraserver system_file:dir r_dir_perms; 23 24 # talk to system_server 25 allow cameraserver system_server:unix_stream_socket { read write }; 26 27 allow cameraserver sensorservice_service:service_manager find; 28