daisy: sepolicy: Address sepolicy denials for the Camera HAL Switch

Signed-off-by: LinkBoi00 <[email protected]>
RevengeOS-Devices · Sep 25, 2021 · 32d477b · 32d477b
1 parent bb15e3c
commit 32d477b
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/sepolicy/vendor/init.te b/sepolicy/vendor/init.te
@@ -12,3 +12,4 @@ allow init sysfs_leds:file r_file_perms;
 allow init sysfs_leds:lnk_file r_file_perms;
 allow init sysfs_kgsl:file create_file_perms;
 allow init sysfs_kgsl:lnk_file r_file_perms;
+allow init socket_device:sock_file { create };
diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts
@@ -17,3 +17,6 @@ sys.fp.vendor					    u:object_r:fingerprint_prop:s0
 
 # Perf
 vendor.target.init.complete                     u:object_r:vendor_mpctl_prop:s0
+
+# HAL3 | HAL1 Switch
+persist.camera.profile                                        u:object_r:camera_prop:s0
diff --git a/sepolicy/vendor/system_app.te b/sepolicy/vendor/system_app.te
@@ -1,3 +1,4 @@
 allow system_app sysfs_zram:dir r_dir_perms;
 allow system_app sysfs_zram:file r_file_perms;
 allow system_app wificond:binder call;
+allow system_app camera_prop:property_service { set };