commit b1053c546b3926c2dc17b08567a9a6e8fd2033b9
author Tim Murray <timmurray@google.com> Fri Mar 04 16:07:02 2016 -0800
committer Tim Murray <timmurray@google.com> Tue Mar 08 11:17:17 2016 -0800
tree 47811135a149760b724e0fc4bf567063ae288707
parent 57abdf2fe0aa785cdd631e14f1939144ea679c5a

Grant mm-qcamera-daemon CAP_SYS_NICE.

mm-qcamera-daemon needs to set a sensor thread to SCHED_FIFO in order to
guarantee sensor event delivery uniformity.

bug 26255266

Change-Id: Id40a93aba0c77a257cf3d7532c421aed0ab065d4

android_filesystem_config.h

diff --git a/android_filesystem_config.h b/android_filesystem_config.h
index b21ad10..eee0481 100644
--- a/android_filesystem_config.h
+++ b/android_filesystem_config.h
@@ -32,6 +32,7 @@
 */
 static const struct fs_path_config android_device_files[] = {
     { 00700, AID_RADIO,     AID_SHELL,     (1ULL << CAP_BLOCK_SUSPEND), "system/bin/qmuxd" },
+    { 00700, AID_CAMERA,    AID_SHELL,     (1ULL << CAP_SYS_NICE), "vendor/bin/mm-qcamera-daemon" },
 #ifdef NO_ANDROID_FILESYSTEM_CONFIG_DEVICE_DIRS
     { 00000, AID_ROOT,      AID_ROOT,      0, "system/etc/fs_config_dirs" },
 #endif

sepolicy/camera.te

diff --git a/sepolicy/camera.te b/sepolicy/camera.te
index 079f82b..c0dc97c 100644
--- a/sepolicy/camera.te
+++ b/sepolicy/camera.te
@@ -7,6 +7,8 @@
 binder_use(camera)
 binder_call(camera, system_server)
 
+allow camera self:capability { sys_nice };
+
 allow camera sensorservice_service:service_manager find;
 
 allow camera system_server:unix_stream_socket { read write };