summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIvan Vecera <ivan@cera.cz>2022-10-17 15:12:59 +0200
committertechyguyperplexable <hlcj1234567@gmail.com>2025-08-27 15:38:54 +0100
commit5dd9f0500b89a733b83cd2917d897c6c0b6ea7ae (patch)
treef70afdd2e348f23e198e90d3e58837215a33c0b7
parentbd5d9abcef6fff7b268fc81f490b8a3794de4fce (diff)
universal9830: sepolicy: Allow camera HAL to access graphics allocator service
Resolves: E SELinux : avc: denied { find } for interface=android.hardware.graphics.allocator::IAllocator sid=u:r:hal_camera_default:s0 pid=5709 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hal_graphics_allocator_hwservice:s0 tclass=hwservice_manager permissive=0 Change-Id: Ie33a4b317ece365df7658c8d056a38ae76c3b101 Signed-off-by: ExtremeXT <75576145+ExtremeXT@users.noreply.github.com>
-rw-r--r--sepolicy/vendor/hal_camera_default.te2
1 files changed, 2 insertions, 0 deletions
diff --git a/sepolicy/vendor/hal_camera_default.te b/sepolicy/vendor/hal_camera_default.te
index f25385b..8949b2a 100644
--- a/sepolicy/vendor/hal_camera_default.te
+++ b/sepolicy/vendor/hal_camera_default.te
@@ -50,5 +50,7 @@ wakelock_use(hal_camera_default)
get_prop(hal_camera_default, exported_camera_prop)
set_prop(hal_camera_default, vendor_camera_prop)
+hal_client_domain(hal_camera_default, hal_graphics_allocator)
+
# Libexynoscamera3 wants to read ro.factory.factory_binary which is not properly namespaced
dontaudit hal_camera_default default_prop:file read;