Home | History | Annotate | Download | only in sepolicy
      1 # Qualcomm MSM camera
      2 type camera, domain, device_domain_deprecated;
      3 type camera_exec, exec_type, file_type;
      4 
      5 init_daemon_domain(camera)
      6 
      7 binder_use(camera)
      8 binder_call(camera, system_server)
      9 
     10 allow camera self:capability { sys_nice };
     11 
     12 allow camera system_server:unix_stream_socket { read write };
     13 
     14 # Interact with other media devices
     15 allow camera camera_device:chr_file rw_file_perms;
     16 allow camera gpu_device:chr_file rw_file_perms;
     17 allow camera video_device:chr_file rw_file_perms;
     18 allow camera { audioserver cameraserver mediaserver surfaceflinger }:fd use;
     19 hal_client_domain(camera, hal_graphics_allocator)
     20 
     21 allow camera hal_renderscript_hwservice:hwservice_manager find;
     22 
     23 # Create camera socket
     24 allow camera camera_data_file:sock_file { create unlink };
     25 
     26 # read/write to /data/misc/camera
     27 allow camera camera_data_file:dir w_dir_perms;
     28 allow camera camera_data_file:file create_file_perms;
     29 
     30 # write to /sys/kernel/range/enable_ps_sensor
     31 allow camera sysfs_camera:file rw_file_perms;
     32 
     33 # Read to /dev/input
     34 allow camera input_device:dir r_dir_perms;
     35 allow camera input_device:chr_file r_file_perms;
     36 
     37 # Find sensorservice
     38 allow camera sensorservice_service:service_manager find;
     39 
     40 # Read persist_camera_file
     41 allow camera persist_file:dir search;
     42 allow camera persist_camera_file:dir search;
     43 allow camera persist_camera_file:file r_file_perms;
     44