| Vadim Caen | d64cf75 | 2022-11-04 12:51:18 +0000 | [diff] [blame] | 1 | # virtual_camera - virtual camera daemon |
| 2 | |
| 3 | type virtual_camera, domain, coredomain; |
| 4 | |
| 5 | app_domain(virtual_camera) |
| 6 | |
| 7 | allow virtual_camera system_app_data_file:dir create_dir_perms; |
| 8 | allow virtual_camera system_app_data_file:file create_file_perms; |
| 9 | |
| 10 | allow virtual_camera activity_service:service_manager find; |
| 11 | |
| 12 | # hal_server_domain adds this rule to prevent any other domain from adding |
| 13 | # a virtual_camera_service. We cannot mix app_domain and hal_server_domain |
| 14 | # so we use app_domain and manully add the neverallow |
| 15 | allow virtual_camera virtual_camera_service:service_manager add; |
| 16 | neverallow { domain -virtual_camera} virtual_camera_service:service_manager add; |