Robert Craig committed a2de15a

Minor updates to policy.

* Create new kickstart debug domain type.
* Drop the camera_data_file type. That
lives in generic now.

Robert Craig<>

Change-Id: Ic9e308ae410ea8d573d6d65872a7e98465437869

Comments (0)

Files changed (4)


 type diagnostic_device, dev_type;
 type kgsl_device, dev_type, mlstrustedobject;
+type kickstart_device, dev_type;
 type mpdecision_device, dev_type;
 type shared_log_device, dev_type;
 type power_control_device, dev_type;
 type kickstart_data_file, file_type, data_file_type;
 type sensors_data_file, file_type, data_file_type;
-type camera_data_file, file_type, data_file_type;
 # Default type for anything under /firmware
 type radio_efs_file, fs_type;


 /dev/cpu_dma_latency           u:object_r:power_control_device:s0
 /dev/diag                      u:object_r:diagnostic_device:s0
+/dev/ks_hsic_bridge            u:object_r:kickstart_device:s0
+/dev/efs_hsic_bridge           u:object_r:kickstart_device:s0
 /dev/smd.*                     u:object_r:shared_memory_device:s0
 /dev/smem_log                  u:object_r:shared_log_device:s0
 /dev/kgsl-3d0                  u:object_r:kgsl_device:s0


 allow kickstart shell_exec:file entrypoint;
 # ls on /data/qcks/
-allow kickstart self:capability dac_override;
+allow kickstart self:capability dac_override;
+# wake_lock and wake_unlock access. separate domain?
+allow kickstart sysfs:file append;
+# Access USB host ks bridge drivers
+allow kickstart kickstart_device:chr_file rw_file_perms;