release-request-e44ed829-e254-4762-ae37-a7739a0f37fb-for-git_oc-dr1-release-3964285 snap-temp-L49200000059745790
Change-Id: I5f59f19fc8c1dbaa3d002fec7a54e094b31f03bb
diff --git a/vrcore/sepolicy/vr_hwc.te b/vrcore/sepolicy/vr_hwc.te
new file mode 100644
index 0000000..2b5730c
--- /dev/null
+++ b/vrcore/sepolicy/vr_hwc.te
@@ -0,0 +1,3 @@
+# VrCore registers a callback with VR HWC. The callback is then used to post new
+# frames to VrCore.
+binder_call(vr_hwc, vrcore_app)
diff --git a/vrcore/sepolicy/vrcore_app.te b/vrcore/sepolicy/vrcore_app.te
index 4515b50..71cd9a4 100644
--- a/vrcore/sepolicy/vrcore_app.te
+++ b/vrcore/sepolicy/vrcore_app.te
@@ -27,6 +27,8 @@
# VrCore-specific services.
allow vrcore_app vr_manager_service:service_manager find;
+allow vrcore_app vr_hwc_service:service_manager find;
+allow vrcore_app virtual_touchpad_service:service_manager find;
# gdbserver for ndk-gdb ptrace attaches to app process.
allow vrcore_app self:process ptrace;
