summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLuK1337 <priv.luk@gmail.com>2018-12-23 22:34:18 +0100
committerLuK1337 <priv.luk@gmail.com>2018-12-23 22:42:26 +0100
commit000358bbafb88b7419d388b7450123c2dc48348d (patch)
tree99199ef2c2bcccae3e207d79b9443d29b341a086
parent40dec77c66061f142e84dae7a5c6fa9dda1dcfe7 (diff)
kirin970-common: sepolicy: Address HwCamera2 denials
Change-Id: Ibf1c1e9519fffa8e64f4a91936572eb4ef2a0c15
-rw-r--r--sepolicy/private/priv_app.te6
-rw-r--r--sepolicy/public/hwservice.te1
2 files changed, 7 insertions, 0 deletions
diff --git a/sepolicy/private/priv_app.te b/sepolicy/private/priv_app.te
new file mode 100644
index 0000000..6c318ee
--- /dev/null
+++ b/sepolicy/private/priv_app.te
@@ -0,0 +1,6 @@
+# Allow binder communication with hal_camera_server
+binder_call(priv_app, hal_camera_server)
+binder_call(hal_camera_server, priv_app)
+
+# Allow priv_app to find default_hisi_hwservice
+allow priv_app default_hisi_hwservice:hwservice_manager find;
diff --git a/sepolicy/public/hwservice.te b/sepolicy/public/hwservice.te
index 2cf0dd9..e078dbd 100644
--- a/sepolicy/public/hwservice.te
+++ b/sepolicy/public/hwservice.te
@@ -1,2 +1,3 @@
+type default_hisi_hwservice, hwservice_manager_type;
type displayengine_hwservice, hwservice_manager_type;
type hal_ext_fingerprint_hwservice, hwservice_manager_type;