1*e4a36f41SAndroid Build Coastguard Worker# cameraserver - camera daemon 2*e4a36f41SAndroid Build Coastguard Workertype cameraserver, domain; 3*e4a36f41SAndroid Build Coastguard Workertype cameraserver_exec, system_file_type, exec_type, file_type; 4*e4a36f41SAndroid Build Coastguard Workertype cameraserver_tmpfs, file_type; 5*e4a36f41SAndroid Build Coastguard Worker 6*e4a36f41SAndroid Build Coastguard Workerbinder_use(cameraserver) 7*e4a36f41SAndroid Build Coastguard Workerbinder_call(cameraserver, binderservicedomain) 8*e4a36f41SAndroid Build Coastguard Workerbinder_call(cameraserver, appdomain) 9*e4a36f41SAndroid Build Coastguard Workerbinder_service(cameraserver) 10*e4a36f41SAndroid Build Coastguard Worker 11*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(cameraserver, hal_camera) 12*e4a36f41SAndroid Build Coastguard Worker 13*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(cameraserver, hal_graphics_allocator) 14*e4a36f41SAndroid Build Coastguard Worker 15*e4a36f41SAndroid Build Coastguard Workerallow cameraserver ion_device:chr_file rw_file_perms; 16*e4a36f41SAndroid Build Coastguard Worker 17*e4a36f41SAndroid Build Coastguard Worker# Talk with graphics composer fences 18*e4a36f41SAndroid Build Coastguard Workerallow cameraserver hal_graphics_composer:fd use; 19*e4a36f41SAndroid Build Coastguard Worker 20*e4a36f41SAndroid Build Coastguard Workeradd_service(cameraserver, cameraserver_service) 21*e4a36f41SAndroid Build Coastguard Workeradd_hwservice(cameraserver, fwk_camera_hwservice) 22*e4a36f41SAndroid Build Coastguard Worker 23*e4a36f41SAndroid Build Coastguard Workerallow cameraserver activity_service:service_manager find; 24*e4a36f41SAndroid Build Coastguard Workerallow cameraserver appops_service:service_manager find; 25*e4a36f41SAndroid Build Coastguard Workerallow cameraserver audioserver_service:service_manager find; 26*e4a36f41SAndroid Build Coastguard Workerallow cameraserver batterystats_service:service_manager find; 27*e4a36f41SAndroid Build Coastguard Workerallow cameraserver cameraproxy_service:service_manager find; 28*e4a36f41SAndroid Build Coastguard Workerallow cameraserver mediaserver_service:service_manager find; 29*e4a36f41SAndroid Build Coastguard Workerallow cameraserver processinfo_service:service_manager find; 30*e4a36f41SAndroid Build Coastguard Workerallow cameraserver scheduling_policy_service:service_manager find; 31*e4a36f41SAndroid Build Coastguard Workerallow cameraserver sensor_privacy_service:service_manager find; 32*e4a36f41SAndroid Build Coastguard Workerallow cameraserver surfaceflinger_service:service_manager find; 33*e4a36f41SAndroid Build Coastguard Worker 34*e4a36f41SAndroid Build Coastguard Workerallow cameraserver hidl_token_hwservice:hwservice_manager find; 35*e4a36f41SAndroid Build Coastguard Worker 36*e4a36f41SAndroid Build Coastguard Worker### 37*e4a36f41SAndroid Build Coastguard Worker### neverallow rules 38*e4a36f41SAndroid Build Coastguard Worker### 39*e4a36f41SAndroid Build Coastguard Worker 40*e4a36f41SAndroid Build Coastguard Worker# cameraserver should never execute any executable without a 41*e4a36f41SAndroid Build Coastguard Worker# domain transition 42*e4a36f41SAndroid Build Coastguard Workerneverallow cameraserver { file_type fs_type }:file execute_no_trans; 43*e4a36f41SAndroid Build Coastguard Worker 44*e4a36f41SAndroid Build Coastguard Worker# The goal of the mediaserver split is to place media processing code into 45*e4a36f41SAndroid Build Coastguard Worker# restrictive sandboxes with limited responsibilities and thus limited 46*e4a36f41SAndroid Build Coastguard Worker# permissions. Example: Audioserver is only responsible for controlling audio 47*e4a36f41SAndroid Build Coastguard Worker# hardware and processing audio content. Cameraserver does the same for camera 48*e4a36f41SAndroid Build Coastguard Worker# hardware/content. Etc. 49*e4a36f41SAndroid Build Coastguard Worker# 50*e4a36f41SAndroid Build Coastguard Worker# Media processing code is inherently risky and thus should have limited 51*e4a36f41SAndroid Build Coastguard Worker# permissions and be isolated from the rest of the system and network. 52*e4a36f41SAndroid Build Coastguard Worker# Lengthier explanation here: 53*e4a36f41SAndroid Build Coastguard Worker# https://android-developers.googleblog.com/2016/05/hardening-media-stack.html 54*e4a36f41SAndroid Build Coastguard Workerneverallow cameraserver domain:{ tcp_socket udp_socket rawip_socket } *; 55*e4a36f41SAndroid Build Coastguard Worker 56*e4a36f41SAndroid Build Coastguard Worker# Allow shell commands from ADB for CTS testing/dumping 57*e4a36f41SAndroid Build Coastguard Workerallow cameraserver adbd:fd use; 58*e4a36f41SAndroid Build Coastguard Workerallow cameraserver adbd:unix_stream_socket { read write }; 59*e4a36f41SAndroid Build Coastguard Workerallow cameraserver shell:fd use; 60*e4a36f41SAndroid Build Coastguard Workerallow cameraserver shell:unix_stream_socket { read write }; 61*e4a36f41SAndroid Build Coastguard Workerallow cameraserver shell:fifo_file { read write }; 62*e4a36f41SAndroid Build Coastguard Worker 63*e4a36f41SAndroid Build Coastguard Worker# Allow to talk with media codec 64*e4a36f41SAndroid Build Coastguard Workerallow cameraserver mediametrics_service:service_manager find; 65*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(cameraserver, hal_codec2) 66*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(cameraserver, hal_omx) 67*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(cameraserver, hal_allocator) 68*e4a36f41SAndroid Build Coastguard Worker 69*e4a36f41SAndroid Build Coastguard Worker# Allow shell commands from ADB for CTS testing/dumping 70*e4a36f41SAndroid Build Coastguard Workeruserdebug_or_eng(` 71*e4a36f41SAndroid Build Coastguard Worker allow cameraserver su:fd use; 72*e4a36f41SAndroid Build Coastguard Worker allow cameraserver su:fifo_file { read write }; 73*e4a36f41SAndroid Build Coastguard Worker allow cameraserver su:unix_stream_socket { read write }; 74*e4a36f41SAndroid Build Coastguard Worker') 75