universal7580: sepolicy: label video4linux sysfs nodes

Change-Id: I051d99f1d6195da668e5ba5b51c08782aacd6acd

diff --git a/sepolicy/file.te b/sepolicy/file.te
index 7081466a6dde779f68a68461a36f19d6bd2b5332..dedd5a6bbde49a0372425f0b0aff2fac72d0e36a 100644 (file)
--- a/sepolicy/file.te
+++ b/sepolicy/file.te
@@ -45,6 +45,7 @@ type sysfs_graphics, sysfs_type, fs_type, mlstrustedobject;
 type sysfs_ion, sysfs_type, fs_type, mlstrustedobject;
 type sysfs_block, sysfs_type, fs_type, mlstrustedobject;
 type sysfs_jack, sysfs_type, fs_type, mlstrustedobject;
+type sysfs_v4l, sysfs_type, fs_type, mlstrustedobject;
 
 allow sysfs_type tmpfs:filesystem associate;
 

diff --git a/sepolicy/genfs_contexts b/sepolicy/genfs_contexts
index 2cd8f71ca5c4f82a4c1d1b7087331ec9345e3af0..00a80db193589a8ac95a740c2c2bcd780f938256 100644 (file)
--- a/sepolicy/genfs_contexts
+++ b/sepolicy/genfs_contexts
@@ -100,3 +100,6 @@ genfscon sysfs /devices/virtual/net/rmnet3 u:object_r:sysfs_net:s0
 
 genfscon sysfs /devices/14830000.decon_fb  u:object_r:sysfs_graphics:s0
 genfscon sysfs /devices/14800000.dsim  u:object_r:sysfs_graphics:s0
+
+# video4linux
+genfscon sysfs /devices/12800000.mfc0/video4linux/  u:object_r:sysfs_v4l:s0

diff --git a/sepolicy/mediacodec.te b/sepolicy/mediacodec.te
index 39d684009d22dae0e85bdd1e4d9e729c9baa105c..524c8e7e30c0631db57d2dec5e779a88dd2973b7 100644 (file)
--- a/sepolicy/mediacodec.te
+++ b/sepolicy/mediacodec.te
@@ -1,5 +1,6 @@
 # /system/lib/omx/
 allow mediacodec system_file:dir r_dir_perms;
 
-# /sys/class/video4linux/video6/name
-allow mediacodec sysfs:file r_file_perms;
+# /sys/class/video4linux/*
+allow mediacodec sysfs_v4l:dir { open read search };
+allow mediacodec sysfs_v4l:file r_file_perms;