diff --git a/shared/sepolicy/vendor/priv_app.te b/shared/sepolicy/vendor/priv_app.te
index 48af07f..7de36ab 100644
--- a/shared/sepolicy/vendor/priv_app.te
+++ b/shared/sepolicy/vendor/priv_app.te
@@ -1,2 +1,6 @@
 gpu_access(priv_app)
 get_prop(priv_app, hal_camera_prop)
+# b/142672293: No other priv-app should need this allow rule now and GMS core runs in its own domain.
+userdebug_or_eng(`
+  auditallow priv_app hal_camera_prop:file { getattr open read map };
+')