diff --git a/app.te b/app.te index 45225b54df1d448e16e14baecf34aa5b2b1f60f6..324039238da325590975c21e8a1c2e4bee2f5551 100644 --- a/app.te +++ b/app.te @@ -243,7 +243,7 @@ neverallow appdomain dev_type:blk_file { read write }; # Access to any of the following character devices. neverallow appdomain { audio_device - camera_device + video_device dm_device radio_device gps_device diff --git a/device.te b/device.te index 06006b26dde849471af13933d84178a4ce6972a3..51750348a9ed14145ab2e6c2822834ee3c7e68a6 100644 --- a/device.te +++ b/device.te @@ -6,7 +6,6 @@ type ashmem_device, dev_type, mlstrustedobject; type audio_device, dev_type; type binder_device, dev_type, mlstrustedobject; type block_device, dev_type; -type camera_device, dev_type; type dm_device, dev_type; type loop_device, dev_type; type pmsg_device, dev_type, mlstrustedobject; @@ -101,3 +100,6 @@ type misc_block_device, dev_type; # Bootctrl block device used by A/B update (update_engine, update_verifier). type bootctrl_block_device, dev_type; + +# XXX: Temporarily alias camera_device for its removal +typealias video_device alias camera_device; diff --git a/file_contexts b/file_contexts index a1fa8042ee1ed0ce0ccd891692358df5bf9a642e..1cd5fbaf586b48d5bb56e15f309f0e534b245c48 100644 --- a/file_contexts +++ b/file_contexts @@ -60,7 +60,7 @@ /dev/block/ram[0-9]* u:object_r:ram_device:s0 /dev/block/zram[0-9]* u:object_r:ram_device:s0 /dev/bus/usb(.*)? u:object_r:usb_device:s0 -/dev/cam u:object_r:camera_device:s0 +/dev/cam u:object_r:video_device:s0 /dev/console u:object_r:console_device:s0 /dev/cpuctl(/.*)? u:object_r:cpuctl_device:s0 /dev/device-mapper u:object_r:dm_device:s0 diff --git a/mediaserver.te b/mediaserver.te index e1c9a54e4df73cde1d6ea5c2396b26d1b2fa8dff..84ceec86b3367b452d0413dd29df7e553c7ebedd 100644 --- a/mediaserver.te +++ b/mediaserver.te @@ -47,8 +47,6 @@ allow mediaserver radio_data_file:file { read getattr }; # Use pipes passed over Binder from app domains. allow mediaserver appdomain:fifo_file { getattr read write }; -# Access camera device. -allow mediaserver camera_device:chr_file rw_file_perms; allow mediaserver rpmsg_device:chr_file rw_file_perms; # Inter System processes communicate over named pipe (FIFO)