| # Qualcomm MSM camera |
| type camera, domain, domain_deprecated; |
| type camera_exec, exec_type, file_type; |
| |
| # Started by init |
| init_daemon_domain(camera) |
| |
| # Interact with other media devices |
| allow camera video_device:dir search; |
| allow camera { gpu_device video_device }:chr_file rw_file_perms; |
| allow camera { audioserver cameraserver surfaceflinger mediaserver }:fd use; |
| |
| # Connect to sensor socket (/dev/sensor/sensor_ctl_socket) |
| unix_socket_connect(camera, sensors, sensors) |
| allow camera sensors_socket:sock_file read; |
| |
| allow camera sensors_device:chr_file rw_file_perms; |
| |
| allow camera self:capability { sys_nice }; |
| |
| # Create front and back camera sockets (/data/cam_socket[23]) |
| # TODO: create these sockets elsewhere, apps shouldn't be putting sockets |
| # directly under /data. |
| type_transition camera system_data_file:sock_file camera_socket "cam_socket2"; |
| type_transition camera system_data_file:sock_file camera_socket "cam_socket3"; |
| allow camera camera_socket:sock_file { create unlink }; |
| allow camera system_data_file:dir w_dir_perms; |
| allow camera system_data_file:sock_file unlink; |
