1 # Qualcomm MSM camera 2 type camera, domain, device_domain_deprecated; 3 type camera_exec, exec_type, file_type; 4 5 init_daemon_domain(camera) 6 7 binder_use(camera) 8 binder_call(camera, system_server) 9 10 allow camera self:capability { sys_nice }; 11 12 allow camera system_server:unix_stream_socket { read write }; 13 14 # Interact with other media devices 15 allow camera camera_device:chr_file rw_file_perms; 16 allow camera gpu_device:chr_file rw_file_perms; 17 allow camera video_device:chr_file rw_file_perms; 18 allow camera { audioserver cameraserver mediaserver surfaceflinger }:fd use; 19 hal_client_domain(camera, hal_graphics_allocator) 20 21 allow camera hal_renderscript_hwservice:hwservice_manager find; 22 23 # Create camera socket 24 allow camera camera_data_file:sock_file { create unlink }; 25 26 # read/write to /data/misc/camera 27 allow camera camera_data_file:dir w_dir_perms; 28 allow camera camera_data_file:file create_file_perms; 29 30 # write to /sys/kernel/range/enable_ps_sensor 31 allow camera sysfs_camera:file rw_file_perms; 32 33 # Read to /dev/input 34 allow camera input_device:dir r_dir_perms; 35 allow camera input_device:chr_file r_file_perms; 36 37 # Find sensorservice 38 allow camera sensorservice_service:service_manager find; 39 40 # Read persist_camera_file 41 allow camera persist_file:dir search; 42 allow camera persist_camera_file:dir search; 43 allow camera persist_camera_file:file r_file_perms; 44