You can check where devices like the Hexagon DSP are accessible from device SELinux policies.
android.googlesource.com/device/google/
QDSP is accessible to the camera, sensors and neural network HALs and CHRE (android.googlesource.com/platform/syste). Google Camera is the only app with direct access to it.
Conversation
Pixels have a dedicated SELinux domain for Google Camera extending the standard untrusted app domain with access to the Hexagon DSP (qdsp_device label) and Pixel Neural Core (airbrush_device). Neural Core is a TPU + IPU combo developed in some kind of collaboration with Samsung.
1
1
4
Kernel driver for airbrush is at android.googlesource.com/kernel/msm.git. Mostly developed by Samsung other than the thermal throttling portions.
In AOSP or the stock OS on Pixels, apps only have indirect access to QDSP or the Neural Core is via the high-level NN API: developer.android.com/ndk/guides/neu.
1
1
4
Since we don't have Google Camera in GrapheneOS like the stock OS, we've been considering removing the special SELinux domain for a while now. Can look back at our past tweets about it. It's useful for testing purposes but it's not something we intend to support or keep working.
2
9
You’re unable to view this Tweet because this account owner limits who can view their Tweets. Learn more
Replying to
microG won't work without being built into the OS. The most it would do is make apps think that Play Services is available but it's not going to work. GrapheneOS doesn't and won't support microG. Google Camera may work right now but it isn't supported and it can't be expected.
1
This Tweet was deleted by the Tweet author. Learn more
Replying to
GrapheneOS doesn't have Google Camera. It can currently be used via github.com/lukaspieper/Gc but that's very unlikely to continue working.
GrapheneOS doesn't have Play Services and there is no way to have a functioning Play Services (or microG) without making a fork of it anyway.
1
Google Camera is the ONLY camera app that has a special SELinux domain in AOSP. Every other camera app is going to continue working as is without the domain. What are people going to do when Google Camera breaks for other reasons like gaining non-trivial dependencies on Play?
