universal7885: Address some denials

* app_domain: Allow untrusted apps to get vendor.camera props such as vendor.camera.skip_unconfigure.packagelist
* debug_daemon: Allow more perms to properly execute logcat, sepolicy neverallow passes still
* Move vendor_camera_prop to vendor_public_prop, to resolve neverallow
This commit is contained in:
roynaetch2544 2022-04-02 15:10:30 +09:00
commit b75cc0ced3
No known key found for this signature in database
GPG key ID: 50ABF73F0D19445D
3 changed files with 3 additions and 3 deletions

View file

@ -10,7 +10,7 @@ allow debug_daemon logcat_exec:file rx_file_perms;
allow debug_daemon self:capability2 syslog;
allow debug_daemon kernel:system syslog_mod;
allow debug_daemon debug_daemon_data_file:file create_file_perms;
allow debug_daemon shell_exec:file execute;
allow debug_daemon shell_exec:file rx_file_perms;
allow debug_daemon self:capability sys_nice;
allow debug_daemon logdr_socket:sock_file write;
allow debug_daemon logd:unix_stream_socket connectto;

View file

@ -1 +1 @@
get_prop(appdomain, exported_camera_prop)
get_prop(appdomain, vendor_camera_prop)

View file

@ -3,7 +3,7 @@ vendor_internal_prop(camera_prop)
vendor_internal_prop(persist_rmnet_prop)
vendor_internal_prop(persist_data_df_prop)
vendor_internal_prop(persist_data_wda_prop)
vendor_internal_prop(vendor_camera_prop)
vendor_public_prop(vendor_camera_prop)
vendor_internal_prop(vendor_factory_prop)
vendor_internal_prop(vendor_gps_prop)
vendor_internal_prop(vendor_nfc_prop)