sepolicy: qti: Add rules for OnePlus Camera

Co-authored-by: Sanju0910 <sreeshankar0910@gmail.com>
Co-authored-by: chandu078 <chandudyavanapelli03@gmail.com>
Signed-off-by: cjh1249131356 <cjh1249131356@gmail.com>
This commit is contained in:
cjh1249131356
2023-03-08 21:01:08 +05:30
committed by psavarmattas
parent 35276cf6af
commit 2d4e173ef8
15 changed files with 210 additions and 6 deletions

View File

@@ -2,18 +2,36 @@
persist.sys.bt.a2dp.pendingtime u:object_r:exported_system_prop:s0
# Camera
oplus.camera. u:object_r:exported_system_prop:s0
NA u:object_r:exported_system_prop:s0
oplus.camera. u:object_r:exported_system_prop:s0
persist.camera. u:object_r:exported_system_prop:s0
persist.vendor.aps.debug.framenum u:object_r:exported_system_prop:s0
persist.vendor.apsSN.algo.enable u:object_r:exported_system_prop:s0
persist.vendor.arcsoft.sn.dumprawinfo u:object_r:exported_system_prop:s0
persist.vendor.facebeauty.dump u:object_r:exported_system_prop:s0
persist.vendor.supernight.dump u:object_r:exported_system_prop:s0
ro.camera. u:object_r:exported_system_prop:s0
ro.oplus. u:object_r:exported_system_prop:s0
ro.oppo. u:object_r:exported_system_prop:s0
ro.vendor.gfx.32bit.target u:object_r:exported_system_prop:s0
ro.vendor.oplus. u:object_r:exported_system_prop:s0
vendor.arcsoft. u:object_r:exported_system_prop:s0
vendor.boot.project_name u:object_r:exported_system_prop:s0
vendor.camera. u:object_r:exported_system_prop:s0
vendor.oplus. u:object_r:exported_system_prop:s0
vendor.oppo. u:object_r:exported_system_prop:s0
vendor.runtime.fastcv.log u:object_r:exported_system_prop:s0
# Display
persist.sys.display.iris.absent u:object_r:system_oplus_iris_prop:s0
# Fingerprint
oplus.fingerprint. u:object_r:system_fingerprint_prop:s0
# Logging
persist.camera.assert.panic u:object_r:exported_system_prop:s0
persist.camera.OverrideLogLevels u:object_r:exported_system_prop:s0
persist.sys.assert.panic u:object_r:exported_system_prop:s0
persist.sys.log.ae u:object_r:exported_system_prop:s0
persist.sys.log.af u:object_r:exported_system_prop:s0
persist.sys.log.awb u:object_r:exported_system_prop:s0
persist.al.cfr.loglevel u:object_r:exported_system_prop:s0
persist.sys.log. u:object_r:exported_system_prop:s0
# Modem
persist.sys.enable_modem_dump u:object_r:exported_system_prop:s0

2
sepolicy/qti/vendor/appdomain.te vendored Normal file
View File

@@ -0,0 +1,2 @@
allow { appdomain -isolated_app } adsprpcd_file:dir r_dir_perms;
allow { appdomain -isolated_app } public_adsprpcd_file:file r_file_perms;

2
sepolicy/qti/vendor/cameraserver.te vendored Normal file
View File

@@ -0,0 +1,2 @@
hal_client_domain(cameraserver, vendor_hal_cameraMDM)
binder_call(cameraserver, vendor_hal_cameraMDM_default)

View File

@@ -2,6 +2,7 @@
type vendor_proc_tri_state_key, fs_type, proc_type;
# Camera
type public_adsprpcd_file, file_type;
type vendor_persist_camera_file, file_type;
# Charging

View File

@@ -2,6 +2,117 @@
/(vendor|system/vendor)/bin/tri-state-key-calibrate u:object_r:tri-state-key-calibrate_exec:s0
# Camera
/mnt/vendor/dsp/fastrpc_shell_3 u:object_r:public_adsprpcd_file:s0
/mnt/vendor/persist/camera(/.*)? u:object_r:vendor_persist_camera_file:s0
/mnt/vendor/persist/dual_camera_calibration(/.*)? u:object_r:vendor_persist_camera_file:s0
/(odm|vendor/odm)/etc/camera/DAC_code\.bin u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/calibrationCfg\.xml u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/camera_engmode\.xml u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/distortionParams\.bin u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/engineer_camera_config u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/inputparam\.xml u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/mwStereoParams\.bin u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/oplus_camera_algo_switch_config u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/oplus_camera_config u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/oplus_camera_zoom_config u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/stereoParams_aftersale\.bin u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/etc/camera/video_beauty_default_config u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/lib/rfsa/adsp/libc\+\+\.so\.1 u:object_r:same_process_hal_file:s0
/(odm|vendor/odm)/lib/rfsa/adsp/libc\+\+abi\.so\.1 u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/bin/hw/vendor\.oplus\.hardware\.cameraMDM@1\.0-service u:object_r:vendor_hal_cameraMDM_default_exec:s0
/(vendor|system/vendor)/dsp(/.*)? u:object_r:adsprpcd_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libBeautyShot_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libVDHexagonBlurless_v2_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libarc_hta_driver_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libarcnn_hvx_1_1_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libarcsoft_dualcam_refocus_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libarcsoft_hdrplus_hvx_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libbitml_nsp_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libcamera_nn_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libcvpdsp_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libdspCV_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libdsp_streamer_binning\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libfastcvadsp\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libfastcvdsp_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libhdr_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libhexagon_nn_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libhta_dsp_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libsnpe_dsp_domains_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libsnpe_dsp_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libsnpe_dsp_v65_domains_v2_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libsnpe_dsp_v66_domains_v2_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib/rfsa/adsp/libSuperSensor_skel\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib(64)?/libc\+\+_shared\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/camera/fdconfigpreview\.bin u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/camera/fdconfigpreviewlite\.bin u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/camera/fdconfigvideo\.bin u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/camera/fdconfigvideolite\.bin u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libAlgoProcess\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libFaceBeautyLiteCap\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libOPPO_Front_SCPortrait\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libOPPO_SCPortrait\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libPlatformValidatorShared\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libPolarrRender\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libSNPE\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libSonyIMX471RmscLibrary\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libSuperSensor\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libSuperSensorFallback\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libSuperSensorProcessor\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libSuperSensorProcessorCWrapper\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libVDBlurless\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libVDDualCameraBlurlessAPI\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libVDFusionBlurlessAPI_v2\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libVDSuperPhotoAPI\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/lib_oneplus_transparenteffect\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/lib_oneplus_watermark\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libadsprpc\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libaps_frame_registration\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libapsdarksight\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libapsexif\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libapsjpeg\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_beautyshot\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_beautyshot_4\.0\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_dualcam_bokeh_api\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_dualcam_refocus_left\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_dualcam_refocus_preview\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_dualcam_refocus_right\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_dualcam_refocus_uw\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_hdr_couple_api\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_hdr_denoise_api\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_hdrplus_hvx_stub\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_high_dynamic_range\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_high_dynamic_range_couple\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_hta\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_low_light_hdr\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_mfsr_frt\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_portrait_distortion_correction\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_portrait_distortion_correction_20801\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_smart_denoise\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_super_night_raw\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libarcsoft_superportrait\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libcvface_api\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libhexagon_nn_stub\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libhistogram\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libhta_hexagon_runtime\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libipebpsstriping\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libmmosal\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libmorpho_dcface\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libmorpho_image_refiner_deflicker\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libmpbase\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libsnpe_adsp\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libsnpe_dsp_domains_v2\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libstblur_capture_api\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libstdc\+\+\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libswregistrationalgo\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libsymphony-cpu\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libsymphonypower\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/libtriplecam_image_optical_zoom\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/unnhal-acc-adreno\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/unnhal-acc-common\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/unnhal-acc-hta\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/unnhal-acc-hvx\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/vendor\.qti\.hardware\.camera\.postproc@1\.0-service-impl\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib64/vendor\.qti\.hardware\.camera\.postproc@1\.0\.so u:object_r:same_process_hal_file:s0
/mnt/vendor/persist/camera(/.*)? u:object_r:vendor_persist_camera_file:s0
/mnt/vendor/persist/dual_camera_calibration(/.*)? u:object_r:vendor_persist_camera_file:s0
/(vendor|system/vendor)/bin/hw/vendor\.oplus\.hardware\.cameraMDM@[1-2]\.0-service u:object_r:vendor_hal_cameraMDM_default_exec:s0
@@ -18,6 +129,10 @@
/(odm|vendor/odm)/bin/hw/vendor\.pixelworks\.hardware\.display\.iris-service u:object_r:hal_graphics_composer_default_exec:s0
/(odm|vendor/odm)/bin/hw/vendor\.pixelworks\.hardware\.feature\.irisfeature-service u:object_r:hal_graphics_composer_default_exec:s0
# Dolby Atmos
/(vendor|system/vendor)/bin/hw/vendor\.dolby\.hardware\.dms@1\.0-service u:object_r:vendor_hal_dms_default_exec:s0
/data/vendor/dolby(/.*)? u:object_r:vendor_data_file:s0
# Engineering
/mnt/vendor/persist/engineermode(/.*)? u:object_r:vendor_persist_engineer_file:s0

View File

@@ -14,6 +14,19 @@ allow hal_camera_default proc_meminfo:file r_file_perms;
allow hal_camera_default vendor_persist_camera_file:dir w_dir_perms;
allow hal_camera_default vendor_persist_camera_file:file create_file_perms;
allow hal_camera_default cgroup:file rw_file_perms;
allow hal_camera_default input_device:dir r_dir_perms;
allow hal_camera_default input_device:chr_file r_file_perms;
allow hal_camera_default proc:file rw_file_perms;
allow hal_camera_default public_adsprpcd_file:file r_file_perms;
add_hwservice(hal_camera_server, hal_camera_hwservice)
binder_call(hal_camera_default, platform_app)
r_dir_file(hal_camera_default, input_device)
rw_dir_file(hal_camera_default, vendor_sysfs_tof)

2
sepolicy/qti/vendor/init.te vendored Normal file
View File

@@ -0,0 +1,2 @@
allow init proc:file write;
allow init adsprpcd_file:file mounton;

19
sepolicy/qti/vendor/platform_app.te vendored Normal file
View File

@@ -0,0 +1,19 @@
typeattribute platform_app hal_camera_client;
hal_client_domain(platform_app, vendor_hal_dms);
allow platform_app oem_service:service_manager find;
allow platform_app vendor_camera_data_file:dir getattr;
allow platform_app vendor_sysfs_kgsl:file r_file_perms;
allow platform_app vendor_xdsp_device:chr_file r_file_perms;
allow platform_app app_data_file:file { read execute };
rw_dir_file(platform_app, vendor_sysfs_battery_supply)
binder_call(platform_app, hal_camera_default)
binder_call(platform_app, vendor_hal_cameraMDM_default)
dontaudit platform_app mnt_vendor_file:dir search;

4
sepolicy/qti/vendor/service_contexts vendored Normal file
View File

@@ -0,0 +1,4 @@
authentication_service u:object_r:oem_service:s0
oplusoiface u:object_r:oem_service:s0
OplusResourceManagerService u:object_r:oem_service:s0
ParamService u:object_r:oem_service:s0

View File

@@ -1,2 +1,14 @@
# Battery Health
r_dir_file(system_app, vendor_sysfs_usb_supply)
allow system_app sysfs_leds:dir search;
rw_dir_file(system_app, sysfs_dm)
rw_dir_file(system_app, sysfs_fastcharge)
rw_dir_file(system_app, sysfs_sync)
rw_dir_file(system_app, sysfs_vibrator)
rw_dir_file(system_app, sysfs_workqueue)
rw_dir_file(system_app, vendor_proc_display)
rw_dir_file(system_app, vendor_proc_wireless)
rw_dir_file(system_app, vendor_sysfs_graphics)
rw_dir_file(system_app, vendor_sysfs_kgsl)
rw_dir_file(system_app, vendor_sysfs_msm_perf)
rw_dir_file(system_app, vendor_sysfs_usb_supply)

7
sepolicy/qti/vendor/untrusted_app.te vendored Normal file
View File

@@ -0,0 +1,7 @@
allow {
untrusted_app
untrusted_app_25
untrusted_app_27
untrusted_app_29
untrusted_app_30
} { window_service oem_service }:service_manager find;

View File

@@ -0,0 +1 @@
allow vendor_cdsprpcd public_adsprpcd_file:file r_file_perms;

1
sepolicy/qti/vendor/vendor_service.te vendored Normal file
View File

@@ -0,0 +1 @@
type oem_service, service_manager_type;

View File

@@ -0,0 +1 @@
allow vendor_vppservice public_adsprpcd_file:file r_file_perms;

View File

@@ -11,4 +11,10 @@ allow vl53l1_daemon_main self:{
allow vl53l1_daemon_main self:netlink_iscsi_socket { read write create bind };
allow vl53l1_daemon_main sysfs:file r_file_perms;
r_dir_file(vl53l1_daemon_main, vendor_persist_camera_file)
r_dir_file(vl53l1_daemon_main, vendor_sysfs_tof)
rw_dir_file(vl53l1_daemon_main, mnt_vendor_file)
rw_dir_file(vl53l1_daemon_main, vendor_persist_camera_file)