commit 9dc4015dda7fc7179030fb29897d349526f14779
author Emilian Peev <epeev@google.com> Fri Dec 21 17:33:08 2018 +0000
committer Emilian Peev <epeev@google.com> Fri Dec 21 17:47:07 2018 +0000
tree 32ea9bbd27b479886f7b8828f77b44ec1c003436
parent 7a050ac2ee4750a78756a1b66042d8d6797b06e3

marlin sepolicy: Allow RS system binary execution

The camera application needs additional SELinux permissions
to run RS scripts.

Bug: 121306110
Test: Manual using application.
Change-Id: Iff06ed6975951400d3005bafcaa8fec0ead965e9

sepolicy/google_camera_app.te

diff --git a/sepolicy/google_camera_app.te b/sepolicy/google_camera_app.te
index 127d743..37f46c5 100644
--- a/sepolicy/google_camera_app.te
+++ b/sepolicy/google_camera_app.te
@@ -20,6 +20,9 @@
 # Execute libraries from RenderScript cache
 allow google_camera_app app_data_file:file { rx_file_perms };
 
+# Execute system binaries from RenderScript
+allow google_camera_app rs_exec:file rx_file_perms;
+
 # Read memory info
 allow google_camera_app proc_meminfo:file r_file_perms;