Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1bd3c321 authored Aug 16, 2024 by Sahil Sonar

FP5: Redo fairphone camera sepolicy

parent d1dfa115

BoardConfig.mk

+2 −0

Original line number	Diff line number	Diff line
		@@ -190,6 +190,8 @@ VENDOR_SECURITY_PATCH := 2024-06-05
		# SELinux
		include device/qcom/sepolicy_vndr-legacy-um/SEPolicy.mk
		BOARD_VENDOR_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/vendor
		SYSTEM_EXT_PUBLIC_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/public
		SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/private

		# Verified Boot
		BOARD_AVB_ENABLE := true

sepolicy/private/property_contexts

0 → 100644

+4 −0

Original line number	Diff line number	Diff line
		# FPCamera
		persist.vendor.tct.camera. u:object_r:vendor_t2m_prop:s0
		vendor.tct.camera. u:object_r:vendor_t2m_prop:s0
		vendor.t2m. u:object_r:vendor_t2m_prop:s0

sepolicy/private/system_app.te

0 → 100644

+1 −0

Original line number	Diff line number	Diff line
		get_prop(system_app, vendor_t2m_prop)

sepolicy/public/property.te

0 → 100644

+1 −0

Original line number	Diff line number	Diff line
		vendor_public_prop(vendor_t2m_prop)

sepolicy/vendor/hal_camera_default.te

+1 −2

Original line number	Diff line number	Diff line
		@@ -4,8 +4,7 @@ allow hal_camera_default vendor_xdsp_device:chr_file r_file_perms;
		allow hal_camera_default vendor_sysfs_camera:dir r_dir_perms;
		allow hal_camera_default vendor_sysfs_camera:file rw_file_perms;

		get_prop(hal_camera_default, vendor_tct_default_prop)
		set_prop(hal_camera_default, vendor_t2m_sys_prop)
		set_prop(hal_camera_default, vendor_t2m_prop)

		allow hal_camera_default persist_camera_file:dir rw_dir_perms;
		allow hal_camera_default persist_camera_file:file create_file_perms;