Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Verified Commit e492ae64 authored by Manu Suresh's avatar Manu Suresh
Browse files

FP6: sepolicy: allow algoservice to run under hal_camera domain 

* This allows us to skip editing sepolicy_vndr
parent 3498ad1c

sepolicy/vendor/algoservice.te

+1 −1
Original line number Diff line number Diff line 
type hal_algoservice_default, domain;

type hal_algoservice_default_exec, exec_type, vendor_file_type, file_type;



hal_client_domain(hal_algoservice_default, hal_camera)

add_service(hal_algoservice_default, vendor_tct_camera_algo_service)

init_daemon_domain(hal_algoservice_default)

binder_use(hal_algoservice_default)
@@ -44,7 +45,6 @@ binder_call(hal_algoservice_default, cameraserver) 
allow dumpstate hal_algoservice_default:binder call;



# camerapostproc service

hal_client_domain(hal_algoservice_default, hal_ispenc);



# ADSP access

allow hal_algoservice_default vendor_xdsp_device:chr_file { r_file_perms };

sepolicy/vendor/attributes

deleted100644 → 0
+0 −4
Original line number Diff line number Diff line 
# camerapostproc service

attribute hal_ispenc;

attribute hal_ispenc_client;

attribute hal_ispenc_server;

sepolicy/vendor/hal_camera_default.te

+0 −1
Original line number Diff line number Diff line
@@ -13,7 +13,6 @@ allow hal_camera_default vl53l1_device:chr_file rw_file_perms; 
allow hal_camera_default persist_camera_file:dir w_dir_perms;

allow hal_camera_default persist_camera_file:file create_file_perms;

allow hal_camera_default mnt_vendor_file:dir search;

hal_server_domain(hal_camera_default, hal_ispenc)



allow hal_camera_default fp_mmitest_sysfs:file { read write open getattr };

allow hal_camera_default fp_mmitest_sysfs:dir { search open read };

sepolicy/vendor/hal_ispenc.te

deleted100644 → 0
+0 −6
Original line number Diff line number Diff line 
# allow hal_ispenc_client binder call with hal_ispenc_server

binder_call(hal_ispenc_client, hal_ispenc_server)

binder_call(hal_ispenc_server, hal_ispenc_client)



#allow hal_ispenc_server to add postproc hwservice and hal_ispenc_client to find the hwservice

hal_attribute_hwservice(hal_ispenc, vendor_hal_camera_postproc_hwservice)