xref: /aosp_15_r20/system/sepolicy/vendor/hal_camera_default.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertype hal_camera_default, domain;
2*e4a36f41SAndroid Build Coastguard Workerhal_server_domain(hal_camera_default, hal_camera)
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Workertype hal_camera_default_exec, exec_type, vendor_file_type, file_type;
5*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(hal_camera_default)
6*e4a36f41SAndroid Build Coastguard Worker
7*e4a36f41SAndroid Build Coastguard Worker# HIDL sensorservice
8*e4a36f41SAndroid Build Coastguard Workerallow hal_camera_default fwk_sensor_hwservice:hwservice_manager find;
9*e4a36f41SAndroid Build Coastguard Worker# AIDL sensorservice
10*e4a36f41SAndroid Build Coastguard Workerallow hal_camera_default fwk_sensor_service:service_manager find;
11*e4a36f41SAndroid Build Coastguard Worker
12*e4a36f41SAndroid Build Coastguard Workerget_prop(hal_camera_default, device_config_camera_native_prop);
13*e4a36f41SAndroid Build Coastguard Worker
14*e4a36f41SAndroid Build Coastguard Worker# Allow reading graphics properties, specifically for EGL blobcache mode
15*e4a36f41SAndroid Build Coastguard Workerget_prop(hal_camera_default, graphics_config_prop);
16*e4a36f41SAndroid Build Coastguard Workerget_prop(hal_camera_default, graphics_config_writable_prop);
17*e4a36f41SAndroid Build Coastguard Worker
18*e4a36f41SAndroid Build Coastguard Worker# For collecting bugreports.
19*e4a36f41SAndroid Build Coastguard Workerallow hal_camera_default dumpstate:fd use;
20*e4a36f41SAndroid Build Coastguard Workerallow hal_camera_default dumpstate:fifo_file write;
21*e4a36f41SAndroid Build Coastguard Worker
22*e4a36f41SAndroid Build Coastguard Workerallow hal_camera_default gpu_device:chr_file rw_file_perms;
23*e4a36f41SAndroid Build Coastguard Workerallow hal_camera_default gpu_device:dir r_dir_perms;
24