From 181043c8705f2f7576f1a1e21bafd7e14cde3f06 Mon Sep 17 00:00:00 2001 From: nailyk-fr Date: Sun, 12 Feb 2017 13:31:17 +0100 Subject: shinano-common: sepolicies: Add camera related entries Change-Id: Icfc6a998c6c5615351ed59111284858b9f27893c shinano-common: Rework credmgrd sepolicies Change-Id: Id922021b05ed0313b5cd7e506641632277a82105 shinano-common: Fix last camera denials Change-Id: Ibf96ebf0a136ffa40be85369896f57645c24157c --- rootdir/init.camera.rc | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) (limited to 'rootdir/init.camera.rc') diff --git a/rootdir/init.camera.rc b/rootdir/init.camera.rc index a2cafe1..bf26bce 100644 --- a/rootdir/init.camera.rc +++ b/rootdir/init.camera.rc @@ -182,7 +182,8 @@ service scdnotifier_nitz /system/bin/scdnotifier nitz on property:sys.listeners.registered=true start wvkbd_installer -service wvkbd_installer /system/bin/logwrapper /system/bin/wvkbd +#service wvkbd_installer /system/bin/logwrapper /system/bin/wvkbd +service wvkbd_installer /system/bin/wvkbd user system group system oneshot @@ -193,12 +194,13 @@ service rmt_storage /system/bin/rmt_storage user root -service qcamerasvr /system/bin/logwrapper /system/bin/mm-qcamera-daemon +#service qcamerasvr /system/bin/logwrapper /system/bin/mm-qcamera-daemon +service qcamerasvr /system/bin/mm-qcamera-daemon class late_start user camera - group camera system inet input graphics -# group camera system inet input graphics credmgr_client cameraserver - seclabel u:r:mm-qcamerad:s0 +# group camera system inet input graphics + group camera system inet input graphics credmgr_client cameraserver +# seclabel u:r:mm-qcamerad:s0 # SONY: TrimArea Daemon # Last 2 args: start block(blk size 128k), number of blocks(partitionsize(kb)/128(kb)) @@ -211,13 +213,14 @@ service tad_static /sbin/tad_static /dev/block/bootdevice/by-name/TA 0,16 # tad_static is in rootfs, normal file_context does not work seclabel u:r:tad:s0 -service cameraserver /system/bin/logwrapper /system/bin/cameraserver +#service cameraserver /system/bin/logwrapper /system/bin/cameraserver +service cameraserver /system/bin/cameraserver class main user cameraserver group camera drmrpc inet media mediadrm net_bt net_bt_admin net_bw_acct credmgr_client trimarea system audio # group audio camera drmrpc inet media mediadrm net_bt net_bt_admin net_bw_acct credmgr_client ioprio rt 4 - seclabel u:r:cameraserver:s0 +# seclabel u:r:cameraserver:s0 writepid /dev/cpuset/foreground/tasks -- cgit v1.2.3