diff --git a/sepolicy/qti/private/property_contexts b/sepolicy/qti/private/property_contexts index b7279c8..c24b857 100644 --- a/sepolicy/qti/private/property_contexts +++ b/sepolicy/qti/private/property_contexts @@ -2,18 +2,36 @@ persist.sys.bt.a2dp.pendingtime u:object_r:exported_system_prop:s0 # Camera -oplus.camera. u:object_r:exported_system_prop:s0 +NA u:object_r:exported_system_prop:s0 +oplus.camera. u:object_r:exported_system_prop:s0 +persist.camera. u:object_r:exported_system_prop:s0 +persist.vendor.aps.debug.framenum u:object_r:exported_system_prop:s0 +persist.vendor.apsSN.algo.enable u:object_r:exported_system_prop:s0 +persist.vendor.arcsoft.sn.dumprawinfo u:object_r:exported_system_prop:s0 +persist.vendor.facebeauty.dump u:object_r:exported_system_prop:s0 +persist.vendor.supernight.dump u:object_r:exported_system_prop:s0 +ro.camera. u:object_r:exported_system_prop:s0 +ro.oplus. u:object_r:exported_system_prop:s0 +ro.oppo. u:object_r:exported_system_prop:s0 +ro.vendor.gfx.32bit.target u:object_r:exported_system_prop:s0 +ro.vendor.oplus. u:object_r:exported_system_prop:s0 +vendor.arcsoft. u:object_r:exported_system_prop:s0 +vendor.boot.project_name u:object_r:exported_system_prop:s0 +vendor.camera. u:object_r:exported_system_prop:s0 +vendor.oplus. u:object_r:exported_system_prop:s0 +vendor.oppo. u:object_r:exported_system_prop:s0 +vendor.runtime.fastcv.log u:object_r:exported_system_prop:s0 + +# Display +persist.sys.display.iris.absent u:object_r:system_oplus_iris_prop:s0 # Fingerprint oplus.fingerprint. u:object_r:system_fingerprint_prop:s0 # Logging -persist.camera.assert.panic u:object_r:exported_system_prop:s0 -persist.camera.OverrideLogLevels u:object_r:exported_system_prop:s0 persist.sys.assert.panic u:object_r:exported_system_prop:s0 -persist.sys.log.ae u:object_r:exported_system_prop:s0 -persist.sys.log.af u:object_r:exported_system_prop:s0 -persist.sys.log.awb u:object_r:exported_system_prop:s0 +persist.al.cfr.loglevel u:object_r:exported_system_prop:s0 +persist.sys.log. u:object_r:exported_system_prop:s0 # Modem persist.sys.enable_modem_dump u:object_r:exported_system_prop:s0 diff --git a/sepolicy/qti/vendor/appdomain.te b/sepolicy/qti/vendor/appdomain.te new file mode 100644 index 0000000..bb8de86 --- /dev/null +++ b/sepolicy/qti/vendor/appdomain.te @@ -0,0 +1,2 @@ +allow { appdomain -isolated_app } adsprpcd_file:dir r_dir_perms; +allow { appdomain -isolated_app } public_adsprpcd_file:file r_file_perms; diff --git a/sepolicy/qti/vendor/cameraserver.te b/sepolicy/qti/vendor/cameraserver.te new file mode 100644 index 0000000..e53d289 --- /dev/null +++ b/sepolicy/qti/vendor/cameraserver.te @@ -0,0 +1,2 @@ +hal_client_domain(cameraserver, vendor_hal_cameraMDM) +binder_call(cameraserver, vendor_hal_cameraMDM_default) diff --git a/sepolicy/qti/vendor/file.te b/sepolicy/qti/vendor/file.te index 02e0ddd..28f6b1b 100644 --- a/sepolicy/qti/vendor/file.te +++ b/sepolicy/qti/vendor/file.te @@ -2,6 +2,7 @@ type vendor_proc_tri_state_key, fs_type, proc_type; # Camera +type public_adsprpcd_file, file_type; type vendor_persist_camera_file, file_type; # Charging diff --git a/sepolicy/qti/vendor/file_contexts b/sepolicy/qti/vendor/file_contexts index 1b5151f..00d983b 100644 --- a/sepolicy/qti/vendor/file_contexts +++ b/sepolicy/qti/vendor/file_contexts @@ -2,6 +2,117 @@ /(vendor|system/vendor)/bin/tri-state-key-calibrate u:object_r:tri-state-key-calibrate_exec:s0 # Camera +/mnt/vendor/dsp/fastrpc_shell_3 u:object_r:public_adsprpcd_file:s0 +/mnt/vendor/persist/camera(/.*)? u:object_r:vendor_persist_camera_file:s0 +/mnt/vendor/persist/dual_camera_calibration(/.*)? u:object_r:vendor_persist_camera_file:s0 +/(odm|vendor/odm)/etc/camera/DAC_code\.bin u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/calibrationCfg\.xml u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/camera_engmode\.xml u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/distortionParams\.bin u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/engineer_camera_config u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/inputparam\.xml u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/mwStereoParams\.bin u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/oplus_camera_algo_switch_config u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/oplus_camera_config u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/oplus_camera_zoom_config u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/stereoParams_aftersale\.bin u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/etc/camera/video_beauty_default_config u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/lib/rfsa/adsp/libc\+\+\.so\.1 u:object_r:same_process_hal_file:s0 +/(odm|vendor/odm)/lib/rfsa/adsp/libc\+\+abi\.so\.1 u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/bin/hw/vendor\.oplus\.hardware\.cameraMDM@1\.0-service u:object_r:vendor_hal_cameraMDM_default_exec:s0 +/(vendor|system/vendor)/dsp(/.*)? u:object_r:adsprpcd_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libBeautyShot_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libVDHexagonBlurless_v2_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libarc_hta_driver_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libarcnn_hvx_1_1_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libarcsoft_dualcam_refocus_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libarcsoft_hdrplus_hvx_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libbitml_nsp_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libcamera_nn_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libcvpdsp_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libdspCV_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libdsp_streamer_binning\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libfastcvadsp\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libfastcvdsp_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libhdr_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libhexagon_nn_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libhta_dsp_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libsnpe_dsp_domains_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libsnpe_dsp_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libsnpe_dsp_v65_domains_v2_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libsnpe_dsp_v66_domains_v2_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib/rfsa/adsp/libSuperSensor_skel\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib(64)?/libc\+\+_shared\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/camera/fdconfigpreview\.bin u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/camera/fdconfigpreviewlite\.bin u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/camera/fdconfigvideo\.bin u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/camera/fdconfigvideolite\.bin u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libAlgoProcess\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libFaceBeautyLiteCap\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libOPPO_Front_SCPortrait\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libOPPO_SCPortrait\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libPlatformValidatorShared\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libPolarrRender\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libSNPE\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libSonyIMX471RmscLibrary\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libSuperSensor\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libSuperSensorFallback\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libSuperSensorProcessor\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libSuperSensorProcessorCWrapper\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libVDBlurless\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libVDDualCameraBlurlessAPI\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libVDFusionBlurlessAPI_v2\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libVDSuperPhotoAPI\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/lib_oneplus_transparenteffect\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/lib_oneplus_watermark\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libadsprpc\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libaps_frame_registration\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libapsdarksight\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libapsexif\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libapsjpeg\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_beautyshot\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_beautyshot_4\.0\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_dualcam_bokeh_api\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_dualcam_refocus_left\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_dualcam_refocus_preview\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_dualcam_refocus_right\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_dualcam_refocus_uw\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_hdr_couple_api\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_hdr_denoise_api\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_hdrplus_hvx_stub\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_high_dynamic_range\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_high_dynamic_range_couple\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_hta\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_low_light_hdr\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_mfsr_frt\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_portrait_distortion_correction\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_portrait_distortion_correction_20801\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_smart_denoise\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_super_night_raw\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libarcsoft_superportrait\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libcvface_api\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libhexagon_nn_stub\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libhistogram\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libhta_hexagon_runtime\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libipebpsstriping\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libmmosal\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libmorpho_dcface\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libmorpho_image_refiner_deflicker\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libmpbase\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libsnpe_adsp\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libsnpe_dsp_domains_v2\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libstblur_capture_api\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libstdc\+\+\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libswregistrationalgo\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libsymphony-cpu\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libsymphonypower\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/libtriplecam_image_optical_zoom\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/unnhal-acc-adreno\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/unnhal-acc-common\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/unnhal-acc-hta\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/unnhal-acc-hvx\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/vendor\.qti\.hardware\.camera\.postproc@1\.0-service-impl\.so u:object_r:same_process_hal_file:s0 +/(vendor|system/vendor)/lib64/vendor\.qti\.hardware\.camera\.postproc@1\.0\.so u:object_r:same_process_hal_file:s0 /mnt/vendor/persist/camera(/.*)? u:object_r:vendor_persist_camera_file:s0 /mnt/vendor/persist/dual_camera_calibration(/.*)? u:object_r:vendor_persist_camera_file:s0 /(vendor|system/vendor)/bin/hw/vendor\.oplus\.hardware\.cameraMDM@[1-2]\.0-service u:object_r:vendor_hal_cameraMDM_default_exec:s0 @@ -18,6 +129,10 @@ /(odm|vendor/odm)/bin/hw/vendor\.pixelworks\.hardware\.display\.iris-service u:object_r:hal_graphics_composer_default_exec:s0 /(odm|vendor/odm)/bin/hw/vendor\.pixelworks\.hardware\.feature\.irisfeature-service u:object_r:hal_graphics_composer_default_exec:s0 +# Dolby Atmos +/(vendor|system/vendor)/bin/hw/vendor\.dolby\.hardware\.dms@1\.0-service u:object_r:vendor_hal_dms_default_exec:s0 +/data/vendor/dolby(/.*)? u:object_r:vendor_data_file:s0 + # Engineering /mnt/vendor/persist/engineermode(/.*)? u:object_r:vendor_persist_engineer_file:s0 diff --git a/sepolicy/qti/vendor/hal_camera_default.te b/sepolicy/qti/vendor/hal_camera_default.te index 278d7c0..5278d90 100644 --- a/sepolicy/qti/vendor/hal_camera_default.te +++ b/sepolicy/qti/vendor/hal_camera_default.te @@ -14,6 +14,19 @@ allow hal_camera_default proc_meminfo:file r_file_perms; allow hal_camera_default vendor_persist_camera_file:dir w_dir_perms; allow hal_camera_default vendor_persist_camera_file:file create_file_perms; +allow hal_camera_default cgroup:file rw_file_perms; + +allow hal_camera_default input_device:dir r_dir_perms; +allow hal_camera_default input_device:chr_file r_file_perms; + +allow hal_camera_default proc:file rw_file_perms; + +allow hal_camera_default public_adsprpcd_file:file r_file_perms; + +add_hwservice(hal_camera_server, hal_camera_hwservice) + +binder_call(hal_camera_default, platform_app) + r_dir_file(hal_camera_default, input_device) rw_dir_file(hal_camera_default, vendor_sysfs_tof) diff --git a/sepolicy/qti/vendor/init.te b/sepolicy/qti/vendor/init.te new file mode 100644 index 0000000..af916d4 --- /dev/null +++ b/sepolicy/qti/vendor/init.te @@ -0,0 +1,2 @@ +allow init proc:file write; +allow init adsprpcd_file:file mounton; diff --git a/sepolicy/qti/vendor/platform_app.te b/sepolicy/qti/vendor/platform_app.te new file mode 100644 index 0000000..3213761 --- /dev/null +++ b/sepolicy/qti/vendor/platform_app.te @@ -0,0 +1,19 @@ +typeattribute platform_app hal_camera_client; + +hal_client_domain(platform_app, vendor_hal_dms); + +allow platform_app oem_service:service_manager find; + +allow platform_app vendor_camera_data_file:dir getattr; + +allow platform_app vendor_sysfs_kgsl:file r_file_perms; + +allow platform_app vendor_xdsp_device:chr_file r_file_perms; + +allow platform_app app_data_file:file { read execute }; + +rw_dir_file(platform_app, vendor_sysfs_battery_supply) + +binder_call(platform_app, hal_camera_default) +binder_call(platform_app, vendor_hal_cameraMDM_default) +dontaudit platform_app mnt_vendor_file:dir search; diff --git a/sepolicy/qti/vendor/service_contexts b/sepolicy/qti/vendor/service_contexts new file mode 100644 index 0000000..63a276f --- /dev/null +++ b/sepolicy/qti/vendor/service_contexts @@ -0,0 +1,4 @@ +authentication_service u:object_r:oem_service:s0 +oplusoiface u:object_r:oem_service:s0 +OplusResourceManagerService u:object_r:oem_service:s0 +ParamService u:object_r:oem_service:s0 diff --git a/sepolicy/qti/vendor/system_app.te b/sepolicy/qti/vendor/system_app.te index 1d7bd90..c586293 100644 --- a/sepolicy/qti/vendor/system_app.te +++ b/sepolicy/qti/vendor/system_app.te @@ -1,2 +1,14 @@ # Battery Health r_dir_file(system_app, vendor_sysfs_usb_supply) +allow system_app sysfs_leds:dir search; +rw_dir_file(system_app, sysfs_dm) +rw_dir_file(system_app, sysfs_fastcharge) +rw_dir_file(system_app, sysfs_sync) +rw_dir_file(system_app, sysfs_vibrator) +rw_dir_file(system_app, sysfs_workqueue) +rw_dir_file(system_app, vendor_proc_display) +rw_dir_file(system_app, vendor_proc_wireless) +rw_dir_file(system_app, vendor_sysfs_graphics) +rw_dir_file(system_app, vendor_sysfs_kgsl) +rw_dir_file(system_app, vendor_sysfs_msm_perf) +rw_dir_file(system_app, vendor_sysfs_usb_supply) diff --git a/sepolicy/qti/vendor/untrusted_app.te b/sepolicy/qti/vendor/untrusted_app.te new file mode 100644 index 0000000..bfabef8 --- /dev/null +++ b/sepolicy/qti/vendor/untrusted_app.te @@ -0,0 +1,7 @@ +allow { + untrusted_app + untrusted_app_25 + untrusted_app_27 + untrusted_app_29 + untrusted_app_30 +} { window_service oem_service }:service_manager find; diff --git a/sepolicy/qti/vendor/vendor_cdsprpcd.te b/sepolicy/qti/vendor/vendor_cdsprpcd.te new file mode 100644 index 0000000..557510c --- /dev/null +++ b/sepolicy/qti/vendor/vendor_cdsprpcd.te @@ -0,0 +1 @@ +allow vendor_cdsprpcd public_adsprpcd_file:file r_file_perms; diff --git a/sepolicy/qti/vendor/vendor_service.te b/sepolicy/qti/vendor/vendor_service.te new file mode 100644 index 0000000..40cf4d1 --- /dev/null +++ b/sepolicy/qti/vendor/vendor_service.te @@ -0,0 +1 @@ +type oem_service, service_manager_type; diff --git a/sepolicy/qti/vendor/vendor_vppservice.te b/sepolicy/qti/vendor/vendor_vppservice.te new file mode 100644 index 0000000..cdf7c5b --- /dev/null +++ b/sepolicy/qti/vendor/vendor_vppservice.te @@ -0,0 +1 @@ +allow vendor_vppservice public_adsprpcd_file:file r_file_perms; diff --git a/sepolicy/qti/vendor/vl53l1_daemon_main.te b/sepolicy/qti/vendor/vl53l1_daemon_main.te index 02e2358..9b0cced 100644 --- a/sepolicy/qti/vendor/vl53l1_daemon_main.te +++ b/sepolicy/qti/vendor/vl53l1_daemon_main.te @@ -11,4 +11,10 @@ allow vl53l1_daemon_main self:{ allow vl53l1_daemon_main self:netlink_iscsi_socket { read write create bind }; +allow vl53l1_daemon_main sysfs:file r_file_perms; + +r_dir_file(vl53l1_daemon_main, vendor_persist_camera_file) +r_dir_file(vl53l1_daemon_main, vendor_sysfs_tof) + rw_dir_file(vl53l1_daemon_main, mnt_vendor_file) +rw_dir_file(vl53l1_daemon_main, vendor_persist_camera_file)