Merge "Re-introduce camera_device type" into nyc-dev
diff --git a/app.te b/app.te
index c4ebdf6..56cecb5 100644
--- a/app.te
+++ b/app.te
@@ -279,11 +279,12 @@
# Access to any of the following character devices.
neverallow appdomain {
audio_device
- video_device
+ camera_device
dm_device
- radio_device
gps_device
+ radio_device
rpmsg_device
+ video_device
}:chr_file { read write };
# Note: Try expanding list of app domains in the future.
diff --git a/device.te b/device.te
index 0fc90c5..06006b2 100644
--- a/device.te
+++ b/device.te
@@ -6,6 +6,7 @@
type audio_device, dev_type;
type binder_device, dev_type, mlstrustedobject;
type block_device, dev_type;
+type camera_device, dev_type;
type dm_device, dev_type;
type loop_device, dev_type;
type pmsg_device, dev_type, mlstrustedobject;