Commit 25acf5c9 authored Aug 03, 2017 by fire855

sepolicy: fix camera denials

parent e4fa0478

sepolicy/cameraserver.te

+2 −0

Original line number	Diff line number	Diff line
		@@ -14,6 +14,8 @@ allow cameraserver devmap_device:chr_file { ioctl };
		allow cameraserver sysfs_devinfo:file rw_file_perms;
		allow cameraserver sysfs_membw:file rw_file_perms;
		allow cameraserver proc_meminfo:file { open read getattr };
		allow cameraserver sysfs_boot_mode:file r_file_perms;
		allow cameraserver sysfs_ddr_type:file r_file_perms;

		# PQ
		allow cameraserver pq_service:service_manager find;

sepolicy/file.te

+2 −0

Original line number	Diff line number	Diff line
		@@ -14,6 +14,8 @@ type sysfs_gps_file, fs_type, sysfs_type;
		type sysfs_ccci, fs_type, sysfs_type;
		type sysfs_devinfo, fs_type, sysfs_type;
		type sysfs_membw, fs_type, sysfs_type;
		type sysfs_boot_mode, fs_type, sysfs_type;
		type sysfs_ddr_type, fs_type, sysfs_type;

		type msensord_daemon_sysfs, fs_type, sysfs_type;

sepolicy/file_contexts

+2 −0

Original line number	Diff line number	Diff line
		@@ -131,6 +131,8 @@
		/sys/kernel/ccci(/.*)? u:object_r:sysfs_ccci:s0
		/sys/bus/platform/drivers/dev_info/dev_info u:object_r:sysfs_devinfo:s0
		/sys/bus/platform/drivers/mem_bw_ctrl/concurrency_scenario u:object_r:sysfs_membw:s0
		/sys/bus/platform/drivers/ddr_type/ddr_type u:object_r:sysfs_ddr_type:s0
		/sys/devices/virtual/BOOT/BOOT/boot/boot_mode u:object_r:sysfs_boot_mode:s0
		/sys/devices/platform/mtk_disp_mgr.0/rgb u:object_r:display_color_sysfs:s0
		/sys/bus/platform/drivers/msensor/daemon u:object_r:msensord_daemon_sysfs:s0
		/sys/bus/platform/drivers/gyroscope/gyro_orientation u:object_r:gyro_orientation_sysfs:s0