Audit hal_camera_prop permissions for priv_app
We've moved GMS core to its own domain, and given it this permission.
Adding auditallows to see if any other privapp needs this rule or if
it's safe to remove it.
Bug: 142672293
Test: Green builds
Change-Id: I023371b503db7c226794c6f0b5fcc10e9a7987f7
diff --git a/shared/sepolicy/vendor/priv_app.te b/shared/sepolicy/vendor/priv_app.te
index 48af07f..7de36ab 100644
--- a/shared/sepolicy/vendor/priv_app.te
+++ b/shared/sepolicy/vendor/priv_app.te
@@ -1,2 +1,6 @@
gpu_access(priv_app)
get_prop(priv_app, hal_camera_prop)
+# b/142672293: No other priv-app should need this allow rule now and GMS core runs in its own domain.
+userdebug_or_eng(`
+ auditallow priv_app hal_camera_prop:file { getattr open read map };
+')
