commit b2f61daf709efe028d307576c5671f33b5c49071
author Emilian Peev <epeev@google.com> Mon Apr 10 09:19:07 2017 +0100
committer gitbuildkicker <android-build@google.com> Tue Apr 11 13:34:39 2017 -0700
tree 36c8cba1230f25ce81b85e37112572700f0a8656
parent 66d38bcbf7a8ead2d794e3b368c1736807a19f4c

Camera: Use 'hal_client_domain' for graphics allocator

Bug: 35850071
Test: CameraDeviceTest#testCameraDeviceStillTemplate,
CameraDeviceTest#testCameraDeviceRecordingTemplate,
CameraDeviceTest#testCameraDevicePreviewTemplate
Change-Id: I2cc0526ab0d9bc7b4263fb7b34134b06ddaa2e4c

(cherry picked from commit e49da2f621cf6d2ed5c87e764551eaa9354adffb)

sepolicy/camera.te

diff --git a/sepolicy/camera.te b/sepolicy/camera.te
index 839e7cf..6a9dd7b 100644
--- a/sepolicy/camera.te
+++ b/sepolicy/camera.te
@@ -15,7 +15,8 @@
 allow camera camera_device:chr_file rw_file_perms;
 allow camera gpu_device:chr_file rw_file_perms;
 allow camera video_device:chr_file rw_file_perms;
-allow camera { audioserver cameraserver mediaserver surfaceflinger hal_graphics_allocator }:fd use;
+allow camera { audioserver cameraserver mediaserver surfaceflinger }:fd use;
+hal_client_domain(camera, hal_graphics_allocator)
 
 # Create camera socket
 allow camera camera_data_file:sock_file { create unlink };