25jiNekogram-de/android_device_tecno_LG8n
3
0
Fork 0
mirror of https://github.com/Anything-at-25-00/android_device_tecno_LG8n.git synced 2024-11-22 13:46:26 -08:00
Code Issues Actions Packages Projects Releases Wiki Activity

LG8n: sepolicy: Address various camera denials

Browse source 
Signed-off-by: Shirayuki39 <lorddemecrius83@proton.me>
This commit is contained in:
Shirayuki39 2024-07-20 13:08:01 +08:00
parent c4d8e5488e
commit 5c82417099
3 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
sepolicy/vendor/file.te vendored
View file

@ -2,6 +2,8 @@
type sysfs_tran_cam_file, fs_type, sysfs_type;
type transsion_camera_data_file, file_type, data_file_type, mlstrustedobject;
type vendor_watermark_data_file, file_type, data_file_type, mlstrustedobject;
type vendor_arcsoft_data_file, file_type, data_file_type, mlstrustedobject;
type vendor_megvii_data_file, file_type, data_file_type, mlstrustedobject;
# Data
type storage_dbg_data_file, file_type, data_file_type;

2
sepolicy/vendor/file_contexts vendored
View file

@ -1,6 +1,8 @@
# Camera
/dev/cml421_ois(/.*)? u:object_r:cml421_ois_device:s0
/dev/cwvi5300 u:object_r:cwvi5300_device:s0
/data/vendor/anc_yuvnight/working_dir(/.*)? u:object_r:vendor_megvii_data_file:s0
/data/vendor/arcsoft(/.*)? u:object_r:vendor_arcsoft_data_file:s0
/data/vendor/camera_watermark(/.*)? u:object_r:vendor_watermark_data_file:s0
/data/vendor/multicam(/.*)? u:object_r:transsion_camera_data_file:s0

6
sepolicy/vendor/mtk_hal_camera.te vendored
View file

@ -9,9 +9,13 @@ allow mtk_hal_camera sysfs_torch_file:file rw_file_perms;
allow mtk_hal_camera sysfs_tran_cam_file:file rw_file_perms;
allow mtk_hal_camera transsion_camera_data_file:dir { write search add_name };
allow mtk_hal_camera transsion_camera_data_file:file {read write create open };
allow mtk_hal_camera vendor_arcsoft_data_file:dir { read write open add_name search };
allow mtk_hal_camera vendor_arcsoft_data_file:file { read write create getattr open };
allow mtk_hal_camera vendor_megvii_data_file:dir { read write open add_name search };
allow mtk_hal_camera vendor_megvii_data_file:file { read write create getattr open };
allow mtk_hal_camera vendor_watermark_data_file:dir { read write open add_name search };
allow mtk_hal_camera vendor_watermark_data_file:file { read write create getattr open };
allow mtk_hal_camera property_socket:sock_file write;
allow mtk_hal_camera hal_trancamserver_hwservice:hwservice_manager find;
get_prop(mtk_hal_camera, vendor_camera_prop)