tag ce8d8baa80fc4df1308ade6165983f4a4efe30af
tagger The Android Open Source Project <initial-contribution@android.com> Mon Jul 15 14:20:22 2019 -0700
object 01adff5c2967d92e1f8d3dc68a1ab0cb50836fb8

Platform Tools Release 29.0.1 (5644136)

commit 01adff5c2967d92e1f8d3dc68a1ab0cb50836fb8
author Ryan Savitski <rsavitski@google.com> Mon May 20 11:26:29 2019 +0100
committer Ryan Savitski <rsavitski@google.com> Mon May 20 13:03:28 2019 +0000
tree ecc7e1e3b6ac7ed184af686851239136709eccdc
parent 45f6141a00fef84f3bdd67b377b4153ab4cc8fe5

Allow camera to notify traced of a notable event (bonito/sargo)

Most apps already have the permission to act as full producers
(isolated_app, ephemeral_app, priv_app, untrusted_app_all), but
the camera doesn't inherit that as it runs in its own domain.

Granting only the socket (i.e. ipc) permission, as:
* only that is needed at the moment.
* granting the shmem/fd permissions would require a broader change, as traced_tmpfs is declared in private/.

Specific denial:
05-20 13:56:20.303  7751  7751 W trigger_perfett: type=1400 audit(0.0:19): avc: denied { write } for name="traced_producer" dev="tmpfs" ino=7061 scontext=u:r:google_camera_app:s0:c181,c256,c512,c768 tcontext=u:object_r:traced_producer_socket:s0 tclass=sock_file permissive=0 app=com.google.android.GoogleCamera

Bug: 130543265
Tested: extrapolating from the same fix on crosshatch, tested manually on blueline-userdebug.
Change-Id: I0c53fe4ea8975f84e26bc856c8cbbedcb88820ea