From 49ed0cd65849d29e5f1cd49b18e2e46de366b577 Mon Sep 17 00:00:00 2001
From: Mathias Agopian <mathias@google.com>
Date: Wed, 15 Mar 2017 17:54:51 -0700
Subject: [PATCH] Allow apps to access the graphic allocator HAL
Test: take a screenshot
Test: run CTS ImageReaderTest
Bug: 36194109
Change-Id: I5db2addd726a66140b707d2d23d3480efcaa90bd
---
private/app.te | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/private/app.te b/private/app.te
index 2eaa8e4bf..1b1f4ca0a 100644
--- a/private/app.te
+++ b/private/app.te
@@ -243,7 +243,8 @@ allow { appdomain -isolated_app } ion_device:chr_file rw_file_perms;
# TODO is write really necessary ?
auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file { write append };
-allow { appdomain -isolated_app } hal_graphics_allocator:fd use;
+# Allow app to access the graphic allocator HAL
+binder_call({ appdomain -isolated_app }, hal_graphics_allocator)
# Allow app to access shared memory created by camera HAL1
allow { appdomain -isolated_app } hal_camera:fd use;
--
GitLab