From 181043c8705f2f7576f1a1e21bafd7e14cde3f06 Mon Sep 17 00:00:00 2001 From: nailyk-fr Date: Sun, 12 Feb 2017 13:31:17 +0100 Subject: shinano-common: sepolicies: Add camera related entries Change-Id: Icfc6a998c6c5615351ed59111284858b9f27893c shinano-common: Rework credmgrd sepolicies Change-Id: Id922021b05ed0313b5cd7e506641632277a82105 shinano-common: Fix last camera denials Change-Id: Ibf96ebf0a136ffa40be85369896f57645c24157c --- rootdir/init.camera.rc | 17 ++++++++++------- rootdir/init.qcom.rc | 4 ++-- 2 files changed, 12 insertions(+), 9 deletions(-) (limited to 'rootdir') diff --git a/rootdir/init.camera.rc b/rootdir/init.camera.rc index a2cafe1..bf26bce 100644 --- a/rootdir/init.camera.rc +++ b/rootdir/init.camera.rc @@ -182,7 +182,8 @@ service scdnotifier_nitz /system/bin/scdnotifier nitz on property:sys.listeners.registered=true start wvkbd_installer -service wvkbd_installer /system/bin/logwrapper /system/bin/wvkbd +#service wvkbd_installer /system/bin/logwrapper /system/bin/wvkbd +service wvkbd_installer /system/bin/wvkbd user system group system oneshot @@ -193,12 +194,13 @@ service rmt_storage /system/bin/rmt_storage user root -service qcamerasvr /system/bin/logwrapper /system/bin/mm-qcamera-daemon +#service qcamerasvr /system/bin/logwrapper /system/bin/mm-qcamera-daemon +service qcamerasvr /system/bin/mm-qcamera-daemon class late_start user camera - group camera system inet input graphics -# group camera system inet input graphics credmgr_client cameraserver - seclabel u:r:mm-qcamerad:s0 +# group camera system inet input graphics + group camera system inet input graphics credmgr_client cameraserver +# seclabel u:r:mm-qcamerad:s0 # SONY: TrimArea Daemon # Last 2 args: start block(blk size 128k), number of blocks(partitionsize(kb)/128(kb)) @@ -211,13 +213,14 @@ service tad_static /sbin/tad_static /dev/block/bootdevice/by-name/TA 0,16 # tad_static is in rootfs, normal file_context does not work seclabel u:r:tad:s0 -service cameraserver /system/bin/logwrapper /system/bin/cameraserver +#service cameraserver /system/bin/logwrapper /system/bin/cameraserver +service cameraserver /system/bin/cameraserver class main user cameraserver group camera drmrpc inet media mediadrm net_bt net_bt_admin net_bw_acct credmgr_client trimarea system audio # group audio camera drmrpc inet media mediadrm net_bt net_bt_admin net_bw_acct credmgr_client ioprio rt 4 - seclabel u:r:cameraserver:s0 +# seclabel u:r:cameraserver:s0 writepid /dev/cpuset/foreground/tasks diff --git a/rootdir/init.qcom.rc b/rootdir/init.qcom.rc index f93ad53..8bad5f8 100644 --- a/rootdir/init.qcom.rc +++ b/rootdir/init.qcom.rc @@ -517,7 +517,7 @@ service irsc_util /system/bin/irsc_util "/etc/sec_config" service sensors /system/bin/sensors.qcom class main user root - group sensors radio system + group root service time_daemon /system/bin/time_daemon class late_start @@ -557,7 +557,7 @@ service drm /system/bin/drmserver service media /system/bin/mediaserver class main user media - group audio camera inet net_bt net_bt_admin net_bw_acct drmrpc mediadrm credmgr_client + group audio camera inet net_bt net_bt_admin net_bw_acct drmrpc mediadrm credmgr_client system ioprio rt 4 -- cgit v1.2.3