LG8n: sepolicy: Address various camera denials

Signed-off-by: Shirayuki39 <lorddemecrius83@proton.me>
This commit is contained in:
Shirayuki39 2024-07-20 13:08:01 +08:00
parent c4d8e5488e
commit 5c82417099
3 changed files with 9 additions and 1 deletions

View file

@ -2,6 +2,8 @@
type sysfs_tran_cam_file, fs_type, sysfs_type; type sysfs_tran_cam_file, fs_type, sysfs_type;
type transsion_camera_data_file, file_type, data_file_type, mlstrustedobject; type transsion_camera_data_file, file_type, data_file_type, mlstrustedobject;
type vendor_watermark_data_file, file_type, data_file_type, mlstrustedobject; type vendor_watermark_data_file, file_type, data_file_type, mlstrustedobject;
type vendor_arcsoft_data_file, file_type, data_file_type, mlstrustedobject;
type vendor_megvii_data_file, file_type, data_file_type, mlstrustedobject;
# Data # Data
type storage_dbg_data_file, file_type, data_file_type; type storage_dbg_data_file, file_type, data_file_type;

View file

@ -1,6 +1,8 @@
# Camera # Camera
/dev/cml421_ois(/.*)? u:object_r:cml421_ois_device:s0 /dev/cml421_ois(/.*)? u:object_r:cml421_ois_device:s0
/dev/cwvi5300 u:object_r:cwvi5300_device:s0 /dev/cwvi5300 u:object_r:cwvi5300_device:s0
/data/vendor/anc_yuvnight/working_dir(/.*)? u:object_r:vendor_megvii_data_file:s0
/data/vendor/arcsoft(/.*)? u:object_r:vendor_arcsoft_data_file:s0
/data/vendor/camera_watermark(/.*)? u:object_r:vendor_watermark_data_file:s0 /data/vendor/camera_watermark(/.*)? u:object_r:vendor_watermark_data_file:s0
/data/vendor/multicam(/.*)? u:object_r:transsion_camera_data_file:s0 /data/vendor/multicam(/.*)? u:object_r:transsion_camera_data_file:s0

View file

@ -9,9 +9,13 @@ allow mtk_hal_camera sysfs_torch_file:file rw_file_perms;
allow mtk_hal_camera sysfs_tran_cam_file:file rw_file_perms; allow mtk_hal_camera sysfs_tran_cam_file:file rw_file_perms;
allow mtk_hal_camera transsion_camera_data_file:dir { write search add_name }; allow mtk_hal_camera transsion_camera_data_file:dir { write search add_name };
allow mtk_hal_camera transsion_camera_data_file:file {read write create open }; allow mtk_hal_camera transsion_camera_data_file:file {read write create open };
allow mtk_hal_camera vendor_arcsoft_data_file:dir { read write open add_name search };
allow mtk_hal_camera vendor_arcsoft_data_file:file { read write create getattr open };
allow mtk_hal_camera vendor_megvii_data_file:dir { read write open add_name search };
allow mtk_hal_camera vendor_megvii_data_file:file { read write create getattr open };
allow mtk_hal_camera vendor_watermark_data_file:dir { read write open add_name search }; allow mtk_hal_camera vendor_watermark_data_file:dir { read write open add_name search };
allow mtk_hal_camera vendor_watermark_data_file:file { read write create getattr open }; allow mtk_hal_camera vendor_watermark_data_file:file { read write create getattr open };
allow mtk_hal_camera property_socket:sock_file write;
allow mtk_hal_camera hal_trancamserver_hwservice:hwservice_manager find; allow mtk_hal_camera hal_trancamserver_hwservice:hwservice_manager find;
get_prop(mtk_hal_camera, vendor_camera_prop) get_prop(mtk_hal_camera, vendor_camera_prop)