| allow cameraserver gpu_device:chr_file rw_file_perms; | |
| set_prop(cameraserver, camera_prop) | |
| allow cameraserver sysfs_camera:file r_file_perms; | |
| allow cameraserver sysfs_camera:dir search; | |
| allow cameraserver system_server:unix_stream_socket { read write }; | |
| # TODO (b/37688918) Verify that this is actually needed and not a violation of treble | |
| binder_call(cameraserver, mediacodec) |