diff options
Diffstat (limited to 'sepolicy/cameraserver.te')
| -rw-r--r-- | sepolicy/cameraserver.te | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/sepolicy/cameraserver.te b/sepolicy/cameraserver.te new file mode 100644 index 0000000..7db63bf --- /dev/null +++ b/sepolicy/cameraserver.te @@ -0,0 +1,23 @@ +allow cameraserver mm-qcamerad:unix_dgram_socket sendto; +allow cameraserver mm-qcamerad:unix_stream_socket connectto; +allow cameraserver camera_data_file:sock_file write; +allow mm-qcamerad cameraserver:unix_dgram_socket sendto; +allow mm-qcamerad cameraserver:unix_stream_socket connectto; +allow mm-qcamerad camera_data_file:sock_file rw_file_perms; +allow cameraserver gpu_device:chr_file rw_file_perms; +allow cameraserver rootfs:lnk_file getattr; +allow cameraserver sysfs_camera_torch:file rw_file_perms; +allow cameraserver sysfs_camera_torch:dir search; +allow cameraserver sysfs_camera_torch:lnk_file read; +allow cameraserver ta_data_file:dir search; +#allow cameraserver secd:unix_stream_socket connectto; +#allow cameraserver secd_socket:sock_file write; + +allow cameraserver camera_data_file:unix_dgram_socket sendto; +allow cameraserver camera_data_file:unix_stream_socket connectto; +allow mm-qcamerad camera_data_file:unix_dgram_socket sendto; +allow mm-qcamerad camera_data_file:unix_stream_socket connectto; + +allow mm-qcamerad ion_device:chr_file { ioctl open read }; +allow cameraserver ion_device:chr_file { ioctl open read }; + |