From 4e30dfa2e0142f7cebb983d2f462a450e022ca4a Mon Sep 17 00:00:00 2001 From: dh-harald Date: Thu, 17 Nov 2016 15:42:45 +0000 Subject: z2plus: seplicy: address new mediaserver/camera denial avc: denied { search } for pid=608 comm="mediaserver" name="camera" dev="sda15" ino=1945933 scontext=u:r:mediaserver:s0 tcontext=u:object_r:camera_data_file:s0 tclass=dir permissive=0 This commit fixes user build camera Change-Id: I1aaa3c46cf447dadb784ca1463df8f56660a6882 --- sepolicy/mediaserver.te | 1 + 1 file changed, 1 insertion(+) diff --git a/sepolicy/mediaserver.te b/sepolicy/mediaserver.te index 4226e3c..859d58f 100644 --- a/sepolicy/mediaserver.te +++ b/sepolicy/mediaserver.te @@ -1,3 +1,4 @@ allow mediaserver audio_device:chr_file { ioctl open read write }; allow mediaserver sensorservice_service:service_manager find; allow mediaserver system_server:unix_stream_socket { read write }; +allow mediaserver camera_data_file:dir search; -- cgit v1.2.3