From e48e4185419d5a378b9e49ef34a2f882950bc407 Mon Sep 17 00:00:00 2001 From: Jeff Vander Stoep Date: Thu, 31 Dec 2020 16:33:23 +0600 Subject: [PATCH] sdm660-common: sepolicy: camera HAL is a client of configstore Addresses: avc: denied { find } for interface=android.hardware.configstore::ISurfaceFlingerConfigs pid=817 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:hal_configstore_ISurfaceFlingerConfigs:s0 tclass=hwservice_manager permissive=0 Bug: 65454046 Test: camera app Change-Id: I84b92e5809b89b7f755322d485b92f5e7175a06a --- sepolicy/vendor/hal_camera_default.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sepolicy/vendor/hal_camera_default.te b/sepolicy/vendor/hal_camera_default.te index 800becd5..9d02a83e 100644 --- a/sepolicy/vendor/hal_camera_default.te +++ b/sepolicy/vendor/hal_camera_default.te @@ -7,7 +7,7 @@ allow hal_camera_default sysfs_kgsl:file r_file_perms; allow hal_camera_default vendor_video_prop:file r_file_perms; allow hal_camera_default vendor_default_prop:property_service set; -binder_call(hal_camera_default, hal_configstore_default) +hal_client_domain(hal_camera_default, hal_configstore) binder_call(hal_camera_default, hal_graphics_allocator_default) set_prop(hal_camera_default, exported_camera_prop) set_prop(hal_camera_default, vendor_camera_prop)