| # communicate with perfd |
| allow cameraserver perfd_data_file:dir search; |
| allow cameraserver perfd:unix_stream_socket connectto; |
| allow cameraserver perfd_data_file:sock_file write; |
| |
| # communicate with camera |
| allow cameraserver camera:unix_dgram_socket sendto; |
| allow cameraserver camera_data_file:sock_file write; |
| allow cameraserver camera_device:chr_file rw_file_perms; |
| |
| allow cameraserver gpu_device:chr_file rw_file_perms; |
| |
| # access to /dev/input/event{5,10} |
| allow cameraserver input_device:dir r_dir_perms; |
| allow cameraserver input_device:chr_file r_file_perms; |
| |
| set_prop(cameraserver, camera_prop) |
| |
| allow cameraserver sysfs_enable_ps_sensor:file w_file_perms; |
| r_dir_file(cameraserver, sysfs_type) |
| # find libraries |
| allow cameraserver system_file:dir r_dir_perms; |
| |
| # talk to system_server |
| allow cameraserver system_server:unix_stream_socket { read write }; |
| |
| allow cameraserver sensorservice_service:service_manager find; |
| |
| allow cameraserver self:socket { create ioctl read write }; |
| |
| # Grant access to Qualcomm MSM Interface (QMI) radio sockets |
| qmux_socket(cameraserver) |
| |
| # allow cameraserver to call some socket ioctls |
| allowxperm cameraserver self:socket ioctl { IPC_ROUTER_IOCTL_LOOKUP_SERVER IPC_ROUTER_IOCTL_BIND_CONTROL_PORT }; |
| |
