Allow FaceHAL to talk to citadeld.
The FaceHAL will use this access to the check
the update state of the Citadel firmware. If
an update failed Citadel doesn't support the
lastest face auth models.
Bug: 141235263
Test: inspection of logs with/without change.
Change-Id: Id98b48255d55b235d0e5a5494700d496af175f6a
Merged-In: Ia9f0bda3dab6af7373513e07d5e8aa79862dc515
diff --git a/vendor/google/hal_face_default.te b/vendor/google/hal_face_default.te
index 83662e6..2d74a2c 100644
--- a/vendor/google/hal_face_default.te
+++ b/vendor/google/hal_face_default.te
@@ -66,3 +66,8 @@
# Allow the face HAL to communicate with the thermal HAL.
hal_client_domain(hal_face_default, hal_thermal)
+
+# Allow the face HAL to talk to citadeld to verify the firmware version.
+allow hal_face_default citadeld_service:service_manager find;
+binder_call(hal_face_default, citadeld)
+
