Add sepolicy for vendor_init related to camera
E selinux : avc: denied { set } for scontext=u:r:vendor_init:s0
tcontext=u:object_r:camera_prop:s0 tclass=property_service permissive=1
Bug: 145484387
Test: flash selinux modules to device and find avc errors gone
Change-Id: Icd2207322236f0f490eb4034a2b321ac35c9e8b4
diff --git a/tracking_denials/vendor_init.te b/tracking_denials/vendor_init.te
index fe507db..c9db8a4 100644
--- a/tracking_denials/vendor_init.te
+++ b/tracking_denials/vendor_init.te
@@ -1,6 +1,3 @@
-# b/145484387
-dontaudit vendor_init camera_prop:property_service set;
-
# b/145485380
dontaudit vendor_init debugfs:file write;
diff --git a/vendor/google/vendor_init.te b/vendor/google/vendor_init.te
index 8f0e505..fab9247 100644
--- a/vendor/google/vendor_init.te
+++ b/vendor/google/vendor_init.te
@@ -14,6 +14,7 @@
set_prop(vendor_init, vendor_audio_prop)
set_prop(vendor_init, vendor_bluetooth_prop)
set_prop(vendor_init, power_prop)
+set_prop(vendor_init, camera_prop)
#radio related
set_prop(vendor_init, cnd_vendor_prop)
