1type camera, domain, device_domain_deprecated; 2type camera_exec, exec_type, file_type; 3 4# Started by init 5init_daemon_domain(camera) 6 7binder_use(camera) 8binder_call(camera, system_server) 9 10allow camera self:capability { sys_nice }; 11 12allow camera sensorservice_service:service_manager find; 13 14allow camera system_server:unix_stream_socket { read write }; 15 16allow camera camera_device:chr_file rw_file_perms; 17allow camera input_device:dir r_dir_perms; 18allow camera input_device:chr_file r_file_perms; 19allow camera media_device:chr_file rw_file_perms; 20allow camera gpu_device:chr_file rw_file_perms; 21allow camera video_device:chr_file rw_file_perms; 22 23allow camera sysfs_prox_snsr:file rw_file_perms; 24allow camera camera_data_file:dir rw_dir_perms; 25allow camera camera_data_file:sock_file create_file_perms; 26 27# /persist access 28allow camera persist_file:dir search; 29allow camera persist_data_file:dir search; 30allow camera persist_data_file:file r_file_perms; 31 32allow camera { cameraserver surfaceflinger }:fd use; 33hal_client_domain(camera, hal_graphics_allocator) 34allow camera hal_renderscript_hwservice:hwservice_manager find; 35