NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03886705] EmCamera: move to vendor partition

Browse Source 
Move EmCamera to vendor partition, need modify the selinux

MTK-Commit-Id: 92c1e87c5f0901e9eb235b00853975d0cf138f90

Change-Id: I47be92abaf4020e20f756cb36bb55c602a1662f2
CR-Id: ALPS03886705
Feature: Engineering Mode
This commit is contained in:
Juan Rong 2020-01-18 10:03:50 +08:00
parent 3c967ac811
commit cdb72dbd48
3 changed files with 19 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
non_plat/radio.te
View File

@ -11,17 +11,7 @@ allow radio sysfs_keypad_file:file { w_file_perms };
# Purpose : for engineermode WFD IOT property # Purpose : for engineermode WFD IOT property
allow radio surfaceflinger:fifo_file { rw_file_perms }; allow radio surfaceflinger:fifo_file { rw_file_perms };
# Date : WK16.14 2016/03/30
# Operation : IT
# Purpose : for engineermode camera app mode
typeattribute radio system_writes_vendor_properties_violators; typeattribute radio system_writes_vendor_properties_violators;
allow radio mtk_em_prop:property_service set;
# Date : WK16.24 2016/06/10
# Operation : Migration
# Purpose : for engineermode camera app mode
allow radio cameraserver_service:service_manager find;
# Date : 2016/06/11 # Date : 2016/06/11
# Operation : IT # Operation : IT
@ -37,7 +27,6 @@ allow radio als_ps_device:chr_file { read open ioctl };
# Date : WK14.38 2016/06/28 # Date : WK14.38 2016/06/28
# Operation : Migration # Operation : Migration
# Purpose : for engineermode # Purpose : for engineermode
allow radio mediatek_prop:property_service set;
allow radio mt_otg_test_device:chr_file { read write ioctl open }; allow radio mt_otg_test_device:chr_file { read write ioctl open };
allow radio mtgpio_device:chr_file { read ioctl open }; allow radio mtgpio_device:chr_file { read ioctl open };
allow radio stpbt_device:chr_file { read write open }; allow radio stpbt_device:chr_file { read write open };
@ -95,11 +84,6 @@ allow radio nvdata_file:file rw_file_perms;
#Purpose: for set persist.net.auto.tethering #Purpose: for set persist.net.auto.tethering
allow radio mtk_em_net_auto_tethering_prop:property_service set; allow radio mtk_em_net_auto_tethering_prop:property_service set;
# Date : WK17.06 2017/02/06
# Operation : IT
# Purpose : for engineermode camera
allow radio vendor_debug_prop:property_service set;
# Date : WK17.03 # Date : WK17.03
# Operation : O Migration # Operation : O Migration
# Purpose : HIDL for rilproxy # Purpose : HIDL for rilproxy

3
non_plat/seapp_contexts
View File

@ -4,3 +4,6 @@
# This is for mtklogger apk to commnucate with mnld # This is for mtklogger apk to commnucate with mnld
user=_app seinfo=platform name=com.mediatek.mtklogger.proxy domain=vendor_app type=app_data_file levelFrom=user user=_app seinfo=platform name=com.mediatek.mtklogger.proxy domain=vendor_app type=app_data_file levelFrom=user
# This is for emcamera apk to commnucate with hal1
user=_app seinfo=platform name=com.mediatek.emcamera domain=vendor_app type=app_data_file levelFrom=user

15
non_plat/vendor_app.te
View File

@ -51,3 +51,18 @@ allow vendor_app connsyslogger:unix_stream_socket connectto;
# PMTKLoggerProxy need copy exception db from data/vendor folder # PMTKLoggerProxy need copy exception db from data/vendor folder
allow vendor_app aee_exp_data_file:file r_file_perms; allow vendor_app aee_exp_data_file:file r_file_perms;
allow vendor_app aee_exp_data_file:dir r_dir_perms; allow vendor_app aee_exp_data_file:dir r_dir_perms;
# Date : WK18.26
# Operation : P migration
# Purpose : for engineermode camera app mode
set_prop(vendor_app, mtk_em_prop);
set_prop(vendor_app, vendor_debug_prop);
set_prop(vendor_app, mediatek_prop);
allow vendor_app cameraserver_service:service_manager find;
# Date : WK18.26
# Purpose :
# eng mode camera - save iamges files and log files on external storage
allow vendor_app media_rw_data_file:dir { create_dir_perms };
allow vendor_app media_rw_data_file:file { create_file_perms };