blob: e90e7c7f345eca4fd9b5ca8b2d2dc5cb2c627abe [file] [log] [blame]
allow hal_camera_default sysfs_soc:dir search;
allow hal_camera_default sysfs_soc:file r_file_perms;
allow hal_camera_default sysfs_ssr:file r_file_perms;
allow hal_camera_default gpu_device:chr_file rw_file_perms;
# For camera hal to use factory calibration data
allow hal_camera_default mnt_vendor_file:dir search;
allow hal_camera_default persist_file:lnk_file read;
allow hal_camera_default persist_file:dir search;
allow hal_camera_default persist_camera_file:dir search;
allow hal_camera_default persist_camera_file:file r_file_perms;
# For camera hal to use system property
get_prop(hal_camera_default, vendor_display_prop)
set_prop(hal_camera_default, vendor_camera_prop)
get_prop(hal_camera_default, vendor_camera_ro_prop)
# For camera hal to talk with rlsservice
allow hal_camera_default rls_service:service_manager find;
binder_call(hal_camera_default, rlsservice)
# For camera hal to talk with gralloc
hal_client_domain(hal_camera_default, hal_graphics_allocator)
hal_client_domain(hal_camera_default, hal_graphics_composer)
allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find;
# QSPM hal service for accessing camera info
hal_client_domain(hal_camera_default, hal_qspmhal)
#For camera hal to talk with ECOService.
allow hal_camera_default eco_service:service_manager find;
binder_call(hal_camera_default, mediacodec)
# For camera hal to communicate with with power HAL
hal_client_domain(hal_camera_default, hal_power)
# For camera hal to communicate with the thermal HAL.
hal_client_domain(hal_camera_default, hal_thermal)
# For camera hal to control priority of current process
hal_client_domain(hal_camera_default, hal_configstore)
allow hal_camera_default self:capability sys_nice;
allow hal_camera_default self:qipcrtr_socket create_socket_perms_no_ioctl;
# For camera hal to talk with system server (for sensor access)
binder_call(hal_camera_default, sensor_service_server)
# For camera hal to talk with GPU and dontaudit unnecessary files in /sys
dontaudit hal_camera_default sysfs_msm_subsys:dir search;
# For camera hal to talk with NNAPI service
hal_client_domain(hal_camera_default, hal_neuralnetworks)
# For camera hal to set kernel driver scheduler policy
allow hal_camera_default kernel:process setsched;
# For camera debugging
allow hal_camera_default camera_vendor_data_file:dir create_dir_perms;
allow hal_camera_default camera_vendor_data_file:file create_file_perms;