1type google_camera_app, domain; 2 3app_domain(google_camera_app) 4 5# Access standard system services 6allow google_camera_app app_api_service:service_manager find; 7allow google_camera_app audioserver_service:service_manager find; 8allow google_camera_app cameraserver_service:service_manager find; 9allow google_camera_app drmserver_service:service_manager find; 10allow google_camera_app mediacodec_service:service_manager find; 11allow google_camera_app mediaextractor_service:service_manager find; 12allow google_camera_app mediaserver_service:service_manager find; 13allow google_camera_app nfc_service:service_manager find; 14allow google_camera_app surfaceflinger_service:service_manager find; 15 16# Execute libraries from RenderScript cache 17allow google_camera_app app_data_file:file { rx_file_perms }; 18 19# Read memory info 20allow google_camera_app proc_meminfo:file r_file_perms; 21 22# gdbserver / stack traces 23allow google_camera_app self:process ptrace; 24 25# Access to Hexagon DSP kernel device 26allow google_camera_app adsprpcd_device:chr_file { r_file_perms }; 27 28# Read and write system app data files passed over Binder. 29# Motivating case was /data/data/com.android.settings/cache/*.jpg for 30# cropping or taking user photos. 31allow google_camera_app system_app_data_file:file { read write getattr }; 32