PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow hal_face to write to /data/vendor/camera_calibration/*.

Browse Source 
Also, allow hal_camera to read from there.

Bug: 133792720
Change-Id: Iedec8d7325b4424d166f8e4d09182e1f29808ef2
Test: Running presubmit.
This commit is contained in:
Matthias Kramm 2019-06-10 15:10:41 -07:00
parent 7436dba4c4
commit 3a44b17897
5 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
private/compat/29.0/29.0.ignore.cil
View File

@ -5,6 +5,7 @@
(typeattribute new_objects)
(typeattributeset new_objects
( new_objects
camera_calibration_vendor_data_file
ctl_apexd_prop
device_config_sys_traced_prop
runtime_apex_dir

3
private/file_contexts
View File

@ -539,6 +539,9 @@
# Face vendor data file
/data/vendor_de/[0-9]+/facedata(/.*)? u:object_r:face_vendor_data_file:s0
# Directory for (auto)calibration file(s)
/data/vendor/camera_calibration(/.*)? u:object_r:camera_calibration_vendor_data_file:s0
# Iris vendor data file
/data/vendor_de/[0-9]+/irisdata(/.*)? u:object_r:iris_vendor_data_file:s0

2
public/file.te
View File

@ -406,6 +406,8 @@ type app_fuse_file, file_type, data_file_type, core_data_file_type, mlstrustedob
type face_vendor_data_file, file_type, data_file_type;
# Type for iris template file
type iris_vendor_data_file, file_type, data_file_type;
# Type for calibration template file
type camera_calibration_vendor_data_file, file_type, data_file_type;
# Socket types
type adbd_socket, file_type, coredomain_socket;

4
public/hal_face.te
View File

@ -10,3 +10,7 @@ allow hal_face ion_device:chr_file r_file_perms;
# Allow read/write access to the face template directory.
allow hal_face face_vendor_data_file:file create_file_perms;
allow hal_face face_vendor_data_file:dir rw_dir_perms;
# Allow writing new camera calibrations
allow hal_face camera_calibration_vendor_data_file:dir rw_dir_perms;
allow hal_face camera_calibration_vendor_data_file:file create_file_perms;

4
vendor/hal_camera_default.te vendored
View File

@ -9,3 +9,7 @@ allow hal_camera_default fwk_sensor_hwservice:hwservice_manager find;
# For collecting bugreports.
allow hal_camera_default dumpstate:fd use;
allow hal_camera_default dumpstate:fifo_file write;
# Allow reading camera calibrations
allow hal_camera_default camera_calibration_vendor_data_file:dir search;
allow hal_camera_default camera_calibration_vendor_data_file:file r_file_perms;