universal7580: sepolicy: Fix exported_camera_prop denials

Change-Id: Ib3abf88a4c71fcd1510a9b1a3cd496b85379c8b2

diff --git a/sepolicy/app.te b/sepolicy/app.te
new file mode 100644 (file)
index 0000000..f2f2bef
--- /dev/null
+++ b/sepolicy/app.te
@@ -0,0 +1 @@
+get_prop(appdomain, exported_camera_prop);

diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
index f91df76d6465f4cf9cc96a42f136a483e55ae6e6..cdb2a86c9d9ba0ce5660fc2827aa93c6dcb9a8a2 100644 (file)
--- a/sepolicy/system_server.te
+++ b/sepolicy/system_server.te
@@ -56,5 +56,6 @@ allow system_server proc_input_devices:file r_file_perms;
 
 unix_socket_connect(system_server, property, gpsd)
 
+get_prop(system_server, exported_camera_prop);
 get_prop(system_server, userspace_reboot_exported_prop);
 get_prop(system_server, userspace_reboot_config_prop);

diff --git a/sepolicy/zygote.te b/sepolicy/zygote.te
index a6e244a5db883140b595ed59db400a7b31a0a0b5..40dd7d639380d07b2d9628171e11cf7f8c538c3e 100644 (file)
--- a/sepolicy/zygote.te
+++ b/sepolicy/zygote.te
@@ -1 +1,3 @@
 dontaudit zygote proc_cmdline:file r_file_perms;
+
+get_prop(zygote, exported_camera_prop);