From 3981006436a7f908e3bce36a9ae87a7c20ee4e56 Mon Sep 17 00:00:00 2001 From: Ivan Vecera Date: Mon, 17 Oct 2022 15:12:59 +0200 Subject: [PATCH] sdm710-common: sepolicy: Allow camera HAL to access graphics allocator service Resolves: E SELinux : avc: denied { find } for interface=android.hardware.graphics.allocator::IAllocator sid=u:r:hal_camera_default:s0 pid=5709 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hal_graphics_allocator_hwservice:s0 tclass=hwservice_manager permissive=0 Change-Id: Ie33a4b317ece365df7658c8d056a38ae76c3b101 --- sepolicy/vendor/hal_camera_default.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/sepolicy/vendor/hal_camera_default.te b/sepolicy/vendor/hal_camera_default.te index 0a9e947..2445c87 100644 --- a/sepolicy/vendor/hal_camera_default.te +++ b/sepolicy/vendor/hal_camera_default.te @@ -1,3 +1,5 @@ +hal_client_domain(hal_camera_default, hal_graphics_allocator) + allow hal_camera_default gpu_device:chr_file rw_file_perms; allow hal_camera_default remosaic_daemon_service:service_manager find;