Merge bsp_diff patches of sepolicy

Issue Detailed: Merge the camera-ext sepolicy from bsp_diff patches. Issue Fixed: Created camera-ext/ivi files in sepolicy. Tested-On: camera preview/capture/record works. Tracked-On: OAM-125158 Signed-off-by: Neo Fang <[email protected]>
projectceladon · Oct 10, 2024 · 97cc0a9 · 97cc0a9
1 parent b6b5a09
commit 97cc0a9
Show file tree

Hide file tree

Showing 9 changed files with 36 additions and 0 deletions.
diff --git a/camera-ext/ivi/cameraserver.te b/camera-ext/ivi/cameraserver.te
@@ -0,0 +1,4 @@
+#============= cameraserver ==============
+allow cameraserver gpu_device:dir search;
+allow cameraserver gpu_device:chr_file rw_file_perms;
+allow cameraserver hal_graphics_allocator_default_tmpfs:file { read write map};
diff --git a/camera-ext/ivi/file_contexts b/camera-ext/ivi/file_contexts
@@ -0,0 +1,4 @@
+/dev/video[0-9]+          u:object_r:video_device:s0
+/(vendor|system/vendor)/bin/android\.hardware\.automotive\.evs@1\.[0-9]-sample  u:object_r:hal_evs_default_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.vendor\.hardware\.camera\.provider@2\.[0-9]+-ivi-service       u:object_r:hal_camera_default_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.iacamera\.provider-ivi-service u:object_r:hal_camera_default_exec:s0
diff --git a/camera-ext/ivi/hal_camera_default.te b/camera-ext/ivi/hal_camera_default.te
@@ -0,0 +1,10 @@
+#============= hal_camera_default ==============
+vndbinder_use(hal_camera_default);
+
+allow hal_camera_default gpu_device:chr_file rw_file_perms;
+allow hal_camera_default gpu_device:dir search;
+allow hal_camera_default hal_graphics_allocator_default_tmpfs:file { map read write };
+allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find;
+allow hal_camera_default hal_graphics_composer_default:fd use;
+allow hal_camera_default self:{ socket vsock_socket } { create read write listen accept bind };
+set_prop(hal_camera_default, vendor_camera_default_prop)
diff --git a/camera-ext/ivi/init.te b/camera-ext/ivi/init.te
@@ -0,0 +1,6 @@
+#
+# init
+#
+
+# wait on /dev/video0 a shared buffer used for camera processing
+allow init video_device:chr_file getattr;
diff --git a/camera-ext/ivi/logwrapper.te b/camera-ext/ivi/logwrapper.te
@@ -0,0 +1 @@
+set_prop(logwrapper, vendor_camera_default_prop)
diff --git a/camera-ext/ivi/property.te b/camera-ext/ivi/property.te
@@ -0,0 +1 @@
+vendor_internal_prop(vendor_camera_default_prop)
diff --git a/camera-ext/ivi/property_contexts b/camera-ext/ivi/property_contexts
@@ -0,0 +1,8 @@
+ro.vendor.remote.sf.fake_camera                 u:object_r:vendor_camera_default_prop:s0
+ro.vendor.camera.in_frame_format.h264 u:object_r:vendor_camera_default_prop:s0
+ro.vendor.camera.in_frame_format.i420 u:object_r:vendor_camera_default_prop:s0
+ro.vendor.camera.decode.vaapi         u:object_r:vendor_camera_default_prop:s0
+ro.vendor.remote.sf.back_camera_hal             u:object_r:vendor_camera_default_prop:s0
+ro.vendor.remote.sf.front_camera_hal            u:object_r:vendor_camera_default_prop:s0
+ro.vendor.camera.transference         u:object_r:vendor_camera_default_prop:s0
+vendor.camera.external         u:object_r:vendor_camera_default_prop:s0
diff --git a/camera-ext/ivi/service_contexts b/camera-ext/ivi/service_contexts
@@ -0,0 +1 @@
+android.hardware.camera.provider.ICameraProvider/ivi/0 u:object_r:hal_camera_service:s0
diff --git a/camera-ext/ivi/vendor_init.te b/camera-ext/ivi/vendor_init.te
@@ -0,0 +1 @@
+set_prop(vendor_init, vendor_camera_default_prop)