Skip to content
Snippets Groups Projects
Commit 125a5a0c authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Android (Google) Code Review
Browse files

Merge "hal_camera: remove video_device restriction" into oc-dev

parents 21e6ab12 a1c94c8d
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 1 addition and 2 deletions
public/hal_camera.te
+ 1
− 2
View file @ 125a5a0c
...@@ -32,6 +32,5 @@ neverallow hal_camera { file_type fs_type }:file execute_no_trans; ...@@ -32,6 +32,5 @@ neverallow hal_camera { file_type fs_type }:file execute_no_trans;
# hal_camera should never need network access. Disallow network sockets. # hal_camera should never need network access. Disallow network sockets.
neverallow hal_camera domain:{ tcp_socket udp_socket rawip_socket } *; neverallow hal_camera domain:{ tcp_socket udp_socket rawip_socket } *;
# Only camera HAL may directly access the camera and video hardware # Only camera HAL may directly access the camera hardware
neverallow { halserverdomain -hal_camera_server } camera_device:chr_file *; neverallow { halserverdomain -hal_camera_server } camera_device:chr_file *;
neverallow { halserverdomain -coredomain -hal_camera_server } video_device:chr_file *;
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment