commit 82b253eb788a7356305d35a7efb81d9ae72986cb
author Stephen Smalley <sds@tycho.nsa.gov> Fri Dec 20 08:32:55 2013 -0500
committer Stephen Smalley <sds@tycho.nsa.gov> Fri Dec 20 08:32:55 2013 -0500
tree 2b3e10a6ce0d23615c0f3846e56e873e29673416
parent 23ad4374ff7b70ba00b70f40bbe170a45a13780d

Add execmem to camera domain.

Removed from domain so we need to add it back to individual domains
as required.

Change-Id: I902ac6f8cf2e93d46b3a976bc4dabefa3905fce6
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

sepolicy/camera.te

diff --git a/sepolicy/camera.te b/sepolicy/camera.te
index a74b1a3..dc57d01 100644
--- a/sepolicy/camera.te
+++ b/sepolicy/camera.te
@@ -5,6 +5,8 @@
 # Started by init
 init_daemon_domain(camera)
 
+allow camera self:process execmem;
+
 # Interact with other media devices
 allow camera camera_device:dir search;
 allow camera { gpu_device video_device camera_device }:chr_file rw_file_perms;