| Vadim Caen | d64cf75 | 2022-11-04 12:51:18 +0000 | [diff] [blame] | 1 | # virtual_camera - virtual camera daemon |
| 2 | |
| 3 | type virtual_camera, domain, coredomain; |
| Vadim Caen | f6e88ec | 2023-09-29 16:15:23 +0200 | [diff] [blame] | 4 | type virtual_camera_exec, system_file_type, exec_type, file_type; |
| Vadim Caen | d64cf75 | 2022-11-04 12:51:18 +0000 | [diff] [blame] | 5 | |
| Vadim Caen | f6e88ec | 2023-09-29 16:15:23 +0200 | [diff] [blame] | 6 | init_daemon_domain(virtual_camera) |
| Vadim Caen | d64cf75 | 2022-11-04 12:51:18 +0000 | [diff] [blame] | 7 | |
| Vadim Caen | f6e88ec | 2023-09-29 16:15:23 +0200 | [diff] [blame] | 8 | # Since virtual_camera is not a real HAL we don't set the |
| 9 | # hal_server_domain(virtual_camera, hal_camera) macro but only the rules that |
| 10 | # we actually need from halserverdomain and hal_camera_server: |
| 11 | binder_use(virtual_camera) |
| Ján Sebechlebský | 5d6b66c | 2023-11-20 09:39:22 +0000 | [diff] [blame] | 12 | binder_call(virtual_camera, cameraserver) |
| 13 | binder_call(virtual_camera, system_server) |
| Vadim Caen | d64cf75 | 2022-11-04 12:51:18 +0000 | [diff] [blame] | 14 | |
| Vadim Caen | f6e88ec | 2023-09-29 16:15:23 +0200 | [diff] [blame] | 15 | # Allow virtual_camera to use fd from apps |
| 16 | allow virtual_camera { appdomain -isolated_app }:fd use; |
| Vadim Caen | d64cf75 | 2022-11-04 12:51:18 +0000 | [diff] [blame] | 17 | |
| Vadim Caen | f6e88ec | 2023-09-29 16:15:23 +0200 | [diff] [blame] | 18 | # Only allow virtual_camera to add a virtual_camera_service and no one else. |
| 19 | add_service(virtual_camera, virtual_camera_service); |
| 20 | |
| 21 | # Allow virtual_camera to map graphic buffers |
| 22 | hal_client_domain(virtual_camera, hal_graphics_allocator) |
| Jan Sebechlebsky | 267b6a9 | 2023-11-17 10:08:16 +0100 | [diff] [blame] | 23 | |
| 24 | # Allow virtual_camera to use GPU |
| 25 | allow virtual_camera gpu_device:chr_file rw_file_perms; |
| 26 | allow virtual_camera gpu_device:dir r_dir_perms; |