From 5372e457d47e7de41c34fc9b276fe8dadbf7df61 Mon Sep 17 00:00:00 2001 From: Jeff Vander Stoep Date: Thu, 7 Sep 2017 16:26:49 -0700 Subject: [PATCH] camera HAL is a client of configstore Addresses: avc: denied { find } for interface=android.hardware.configstore::ISurfaceFlingerConfigs pid=817 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hal_configstore_ISurfaceFlingerConfigs:s0 tclass=hwservice_manager permissive=0 Bug: 65454046 Test: camera app Change-Id: I84b92e5809b89b7f755322d485b92f5e7175a06a --- sepolicy/vendor/hal_camera_default.te | 1 + 1 file changed, 1 insertion(+) diff --git a/sepolicy/vendor/hal_camera_default.te b/sepolicy/vendor/hal_camera_default.te index 92d75276..dcc69ac0 100644 --- a/sepolicy/vendor/hal_camera_default.te +++ b/sepolicy/vendor/hal_camera_default.te @@ -7,6 +7,7 @@ allow hal_camera_default qdisplay_service:service_manager { find }; allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find; allow hal_camera_default hal_graphics_allocator_hwservice:hwservice_manager find; +hal_client_domain(hal_camera_default, hal_configstore) binder_call(hal_camera_default, hal_graphics_composer) binder_call(hal_camera_default, system_server) binder_call(hal_camera_default, hal_graphics_allocator)