1 allow hal_camera_default input_device:dir r_dir_perms; 2 3 allow hal_camera_default sysfs_laser:file w_file_perms; 4 vndbinder_use(hal_camera_default); 5 allow hal_camera_default qdisplay_service:service_manager { find }; 6 7 hal_client_domain(hal_camera_default, hal_graphics_allocator) 8 9 binder_call(hal_camera_default, hal_graphics_composer) 10 binder_call(hal_camera_default, system_server) 11 12 # For camera team debugging 13 userdebug_or_eng(` 14 allow hal_camera_default camera_vendor_data_file:dir create_dir_perms; 15 allow hal_camera_default camera_vendor_data_file:file create_file_perms; 16 ') 17 18 # For interfacing with PowerHAL 19 hal_client_domain(hal_camera_default, hal_power) 20 21 # For interfacing with ThermalHAL 22 hal_client_domain(hal_camera_default, hal_thermal) 23 24 # For boot time GPU access (b/111370628) 25 hal_client_domain(hal_camera_default, hal_configstore) 26 27 allow hal_camera_default proc_stat:file r_file_perms; 28 29 allow hal_camera_default hal_paintbox_hwservice:hwservice_manager find; 30 binder_call(hal_camera_default, easel) 31 32 dontaudit hal_camera_default kernel:system module_request; 33 34 dontaudit hal_camera_default vendor_display_prop:file r_file_perms; 35