Label camera device and add permissions
(cherry picked from commit dc65afdc804d32a68113a4e23f6d3e5cc2ded0db)
Grant access to qualcomm camera daemon.
Bug: 28359909
Change-Id: I49674308f6d88640df4cea2804895a0645e878b8
diff --git a/sepolicy/camera.te b/sepolicy/camera.te
index c0dc97c..0e8f6e6 100644
--- a/sepolicy/camera.te
+++ b/sepolicy/camera.te
@@ -13,7 +13,7 @@
allow camera system_server:unix_stream_socket { read write };
-allow camera video_device:chr_file rw_file_perms;
+allow camera camera_device:chr_file rw_file_perms;
allow camera input_device:dir r_dir_perms;
allow camera input_device:chr_file r_file_perms;
allow camera media_device:chr_file rw_file_perms;
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 4eef661..58bce36 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -3,13 +3,13 @@
/dev/block/platform/soc\.0/f9824900\.sdhci/by-name/frp u:object_r:frp_block_device:s0
/dev/diag u:object_r:diag_device:s0
/dev/dpl_ctrl u:object_r:dpl_device:s0
-/dev/jpeg[0-9]+ u:object_r:video_device:s0
+/dev/jpeg[0-9]+ u:object_r:camera_device:s0
# GPU device
/dev/kgsl-3d0 u:object_r:gpu_device:s0
/dev/kgsl u:object_r:gpu_device:s0
-/dev/media([0-9])+ u:object_r:video_device:s0
+/dev/media([0-9])+ u:object_r:camera_device:s0
/dev/msm_thermal_query u:object_r:thermal_engine_device:s0
/dev/pn54x u:object_r:nfc_device:s0
/dev/qseecom u:object_r:tee_device:s0
diff --git a/sepolicy/inputeventfind.te b/sepolicy/inputeventfind.te
index eaa7fdf..867994d 100644
--- a/sepolicy/inputeventfind.te
+++ b/sepolicy/inputeventfind.te
@@ -9,5 +9,5 @@
# create symlink to /dev/stm_sensor
allow inputeventfind device:dir { add_name write };
-allow inputeventfind video_device:lnk_file create;
-type_transition inputeventfind device:lnk_file video_device;
+allow inputeventfind camera_device:lnk_file create;
+type_transition inputeventfind device:lnk_file camera_device;
