| vndbinder_use(hal_camera_default); |
| allow hal_camera_default sysfs_soc:dir search; |
| allow hal_camera_default sysfs_soc:file r_file_perms; |
| allow hal_camera_default sysfs_ssr:file r_file_perms; |
| allow hal_camera_default gpu_device:chr_file rw_file_perms; |
| |
| # For camera hal to use factory calibration data |
| allow hal_camera_default mnt_vendor_file:dir search; |
| allow hal_camera_default persist_file:lnk_file read; |
| allow hal_camera_default persist_file:dir search; |
| allow hal_camera_default persist_camera_file:dir search; |
| allow hal_camera_default persist_camera_file:file r_file_perms; |
| |
| # For camera hal to use system property |
| get_prop(hal_camera_default, vendor_display_prop) |
| set_prop(hal_camera_default, vendor_camera_prop) |
| get_prop(hal_camera_default, vendor_camera_ro_prop) |
| |
| # For camera hal to talk with rlsservice |
| allow hal_camera_default rls_service:service_manager find; |
| binder_call(hal_camera_default, rlsservice) |
| |
| # For camera hal to talk with gralloc |
| hal_client_domain(hal_camera_default, hal_graphics_allocator) |
| hal_client_domain(hal_camera_default, hal_graphics_composer) |
| allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find; |
| |
| # QSPM hal service for accessing camera info |
| hal_client_domain(hal_camera_default, hal_qspmhal) |
| |
| #For camera hal to talk with ECOService. |
| allow hal_camera_default eco_service:service_manager find; |
| binder_call(hal_camera_default, mediacodec) |
| |
| # For camera hal to communicate with with power HAL |
| hal_client_domain(hal_camera_default, hal_power) |
| |
| # For camera hal to communicate with the thermal HAL. |
| hal_client_domain(hal_camera_default, hal_thermal) |
| |
| # For camera hal to control priority of current process |
| hal_client_domain(hal_camera_default, hal_configstore) |
| allow hal_camera_default self:capability sys_nice; |
| allow hal_camera_default self:qipcrtr_socket create_socket_perms_no_ioctl; |
| |
| # For camera hal to talk with system server (for sensor access) |
| binder_call(hal_camera_default, sensor_service_server) |
| |
| # For camera hal to talk with GPU and dontaudit unnecessary files in /sys |
| dontaudit hal_camera_default sysfs_msm_subsys:dir search; |
| |
| # For camera hal to talk with NNAPI service |
| hal_client_domain(hal_camera_default, hal_neuralnetworks) |
| |
| # For camera hal to set kernel driver scheduler policy |
| allow hal_camera_default kernel:process setsched; |
| |
| # For camera debugging |
| userdebug_or_eng(` |
| allow hal_camera_default camera_vendor_data_file:dir create_dir_perms; |
| allow hal_camera_default camera_vendor_data_file:file create_file_perms; |
| ') |
