Label /dev/tegra_camera as a camera_device.
tegra_camera has the camera group id. Because
of this, the node should use the camera_device
label. We only allow mediaserver access to
camera_device versus broader access to a
video_device.
Change-Id: I46cf4e2d3e40c03282d37febe1481772587b65f3
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index c370227..bff58ba 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -4,6 +4,7 @@
/dev/knvmap u:object_r:knv_device:s0
/dev/lightsensor u:object_r:sensors_device:s0
/dev/mi1040 u:object_r:camera_device:s0
+/dev/tegra_camera u:object_r:camera_device:s0
/dev/nvhost.* u:object_r:nvhost_device:s0
/dev/nvhost-ctrl u:object_r:gpu_device:s0
/dev/nvhost-gr2d u:object_r:gpu_device:s0
