google_camera_app.te revision 153afe88d3a5f484d3016736239b1ffcb5be800f 
1type google_camera_app, domain, coredomain;
2
3app_domain(google_camera_app)
4net_domain(google_camera_app)
5
6# Access standard system services
7allow google_camera_app app_api_service:service_manager find;
8allow google_camera_app audioserver_service:service_manager find;
9allow google_camera_app cameraserver_service:service_manager find;
10allow google_camera_app drmserver_service:service_manager find;
11allow google_camera_app mediacodec_service:service_manager find;
12allow google_camera_app mediaextractor_service:service_manager find;
13allow google_camera_app mediaserver_service:service_manager find;
14allow google_camera_app mediametrics_service:service_manager find;
15allow google_camera_app nfc_service:service_manager find;
16allow google_camera_app surfaceflinger_service:service_manager find;
17
18allow google_camera_app hidl_token_hwservice:hwservice_manager find;
19
20# Execute libraries from RenderScript cache
21allow google_camera_app app_data_file:file { rx_file_perms };
22
23# Read memory info
24allow google_camera_app proc_meminfo:file r_file_perms;
25
26# gdbserver / stack traces
27allow google_camera_app self:process ptrace;
28
29# Access to Hexagon DSP kernel device
30allow google_camera_app qdsp_device:chr_file { r_file_perms };
31
32# Read and write system app data files passed over Binder.
33# Motivating case was /data/data/com.android.settings/cache/*.jpg for
34# cropping or taking user photos.
35allow google_camera_app system_app_data_file:file { read write getattr };
36
37# Allow GoogleCamera access to necessary vendor libraries to execute
38# Halide code
39allow google_camera_app hexagon_halide_file:file { execute read open getattr };
40