commit 7828b952794a8efa89754b330879d3bc620a9bf6
author Peng Xu <pengxu@google.com> Mon Apr 10 19:49:03 2017 -0700
committer Peng Xu <pengxu@google.com> Mon Apr 10 19:49:03 2017 -0700
tree 7ffcdcbf7661a15485bc9ec165034349088d4d99
parent 408f5865c579b5171ce25ed3a57c04682bbf4b53

Add necessary permission to use gralloc1 inside sensor hal

Bug: 36900495
Test: SensorDirectReportTest
Change-Id: I5d122dac177e272e4b7465acc123400f5d0b687c

sepolicy/hal_sensors.te

diff --git a/sepolicy/hal_sensors.te b/sepolicy/hal_sensors.te
index 4cb4206..99fa7d9 100644
--- a/sepolicy/hal_sensors.te
+++ b/sepolicy/hal_sensors.te
@@ -24,5 +24,5 @@
 set_prop(hal_sensors, sensors_prop)
 
 # Allow access to gralloc shared memory (ion), for sensor direct report
-allow hal_sensors ion_device:chr_file { open read };
+allow hal_sensors ion_device:chr_file { open read ioctl };
 allow hal_sensors hal_graphics_allocator:fd use;