Merge "modem_svc: move shared_modem_platform related sepolicy to gs-common" into main

tracking_denials/bug_map

diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map
index bc90c7c..cfb0d77 100644
--- a/tracking_denials/bug_map
+++ b/tracking_denials/bug_map
@@ -6,6 +6,7 @@
 edgetpu_vendor_server shell_data_file dir b/369475225
 edgetpu_vendor_server shell_data_file dir b/369475363
 hal_bluetooth_btlinux vendor_default_prop property_service b/350832030
+hal_camera_default aconfig_storage_metadata_file dir b/383013471
 hal_radioext_default radio_vendor_data_file file b/312590044
 incidentd debugfs_wakeup_sources file b/288049561
 incidentd incidentd anon_inode b/288049561

vendor/debug_camera_app.te

diff --git a/vendor/debug_camera_app.te b/vendor/debug_camera_app.te
index 86394cf..6474cb1 100644
--- a/vendor/debug_camera_app.te
+++ b/vendor/debug_camera_app.te
@@ -1,3 +1,4 @@
+# File containing sepolicies for GCA-Eng & GCA-Next.
 userdebug_or_eng(`
 	# Allows GCA-Eng & GCA-Next access the GXP device and properties.
 	allow debug_camera_app gxp_device:chr_file rw_file_perms;
@@ -9,4 +10,7 @@
 
 	# Allows  GCA_Eng & GCA-Next to access the hw_jpeg /dev/video12.
 	allow debug_camera_app hw_jpg_device:chr_file rw_file_perms;
+
+	# Allow tachyon_service to communicate with GCA-Eng via binder.
+	binder_call(edgetpu_tachyon_server, debug_camera_app);
 ')

vendor/google_camera_app.te

diff --git a/vendor/google_camera_app.te b/vendor/google_camera_app.te
index c572c26..05aff08 100644
--- a/vendor/google_camera_app.te
+++ b/vendor/google_camera_app.te
@@ -8,3 +8,6 @@
 
 # Allows GCA to access the hw_jpeg /dev/video12.
 allow google_camera_app hw_jpg_device:chr_file rw_file_perms;
+
+# Allow tachyon service to communicate with google_camera_app via binder.
+binder_call(edgetpu_tachyon_server, google_camera_app);