sepolicy/hal_camera.te

vndbinder_use(hal_camera_default);

allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find;
hal_client_domain(hal_camera_default, hal_graphics_allocator);
hal_client_domain(hal_camera_default, hal_graphics_composer);

# for external camera
allow cameraserver device:dir r_dir_perms;
allow cameraserver video_device:dir r_dir_perms;
allow cameraserver video_device:chr_file rw_file_perms;

allow hal_camera_default gpu_device:chr_file { open read write ioctl map getattr };
allow hal_camera_default dri_device:dir { open read search };
allow cameraserver dri_device:dir { open read write search getattr };
allow cameraserver gpu_device:chr_file { open read write ioctl map getattr };