From 77c7d6fa8ad5f988d65e64b9f2f7c12d0dbf29ad Mon Sep 17 00:00:00 2001
From: Yin-Chia Yeh <yinchiayeh@google.com>
Date: Mon, 26 Feb 2018 14:08:21 -0800
Subject: [PATCH] hal_camera: Allow writing dump info into pipes
So dumpsys media.camera can do hal dump without root.
Bug: 72261676
Change-Id: Ic7325418bc2ee5dbb005430135f1ccc88b418e8c
---
public/hal_camera.te | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/public/hal_camera.te b/public/hal_camera.te
index 8fe744214..43f74b488 100644
--- a/public/hal_camera.te
+++ b/public/hal_camera.te
@@ -18,6 +18,10 @@ allow hal_camera { appdomain -isolated_app }:fd use;
allow hal_camera surfaceflinger:fd use;
allow hal_camera hal_allocator_server:fd use;
+# Needed to provide debug dump output via dumpsys' pipes.
+allow hal_camera shell:fd use;
+allow hal_camera shell:fifo_file write;
+
###
### neverallow rules
###
--
GitLab