From ae48d8ce69c66200d0f28460ac6c267ca1ed692a Mon Sep 17 00:00:00 2001 From: Jeff Vander Stoep Date: Thu, 7 Sep 2017 16:26:49 -0700 Subject: sdm660-common: sepolicy: camera HAL is a client of configstore Addresses: avc: denied { find } for interface=android.hardware.configstore::ISurfaceFlingerConfigs pid=817 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hal_configstore_ISurfaceFlingerConfigs:s0 tclass=hwservice_manager permissive=0 Bug: 65454046 Test: camera app Change-Id: I84b92e5809b89b7f755322d485b92f5e7175a06a --- sepolicy/vendor/hal_camera_default.te | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'sepolicy') diff --git a/sepolicy/vendor/hal_camera_default.te b/sepolicy/vendor/hal_camera_default.te index 904d140..eb5e65f 100644 --- a/sepolicy/vendor/hal_camera_default.te +++ b/sepolicy/vendor/hal_camera_default.te @@ -1,7 +1,6 @@ -binder_call(hal_camera_default, hal_configstore_default) +hal_client_domain(hal_camera_default, hal_configstore) binder_call(hal_camera_default, hal_graphics_allocator_default) -allow hal_camera_default hal_configstore_ISurfaceFlingerConfigs:hwservice_manager find; allow hal_camera_default hal_graphics_allocator_hwservice:hwservice_manager find; allow hal_camera_default sysfs_kgsl:file r_file_perms; -- cgit v1.2.3