Skip to content
Snippets Groups Projects
  • Jeff Vander Stoep's avatar
    cc8a09f5
    Re-introduce camera_device type · cc8a09f5
    Jeff Vander Stoep authored
    camera_device was previously removed in AOSP commit: b7aace2d
    "camera_device: remove type and add typealias" because the
    same domains required access to both without exception, meaning
    there was no benefit to distinguishing between the two. However,
    with the split up of mediaserver this is no longer the case and
    distinguishing between the camera and video  provides a legitimate
    security benefit. For example, the mediacodec domain requires access
    to the video_device for access to hardware accelerated codecs but does
    not require access to the camera.
    
    Bug: 28359909
    Change-Id: I8a4592722d8e6391c0e91b440914284b7245e232
    cc8a09f5
    History
    Re-introduce camera_device type
    Jeff Vander Stoep authored
    camera_device was previously removed in AOSP commit: b7aace2d
    "camera_device: remove type and add typealias" because the
    same domains required access to both without exception, meaning
    there was no benefit to distinguishing between the two. However,
    with the split up of mediaserver this is no longer the case and
    distinguishing between the camera and video  provides a legitimate
    security benefit. For example, the mediacodec domain requires access
    to the video_device for access to hardware accelerated codecs but does
    not require access to the camera.
    
    Bug: 28359909
    Change-Id: I8a4592722d8e6391c0e91b440914284b7245e232
device.te 3.18 KiB