| vndbinder_use(hal_camera_default); |
| allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find; |
| hal_client_domain(hal_camera_default, hal_graphics_allocator); |
| hal_client_domain(hal_camera_default, hal_graphics_composer); |
| |
| # For camera hal to talk with sensor service |
| binder_call(hal_camera_default, sensor_service_server) |
| binder_call(sensor_service_server, hal_camera_default) |
| allow hal_camera_default self:vsock_socket create_socket_perms_no_ioctl; |
| |
| # camera hal with minigbm |
| allow hal_camera_default gpu_device:chr_file { open read write ioctl map }; |