From 84d3523c6c9d6f0e9ae3d918871eed6e12c6c506 Mon Sep 17 00:00:00 2001
From: "ELIYAZ MOMIN (xWF)" <mohammedeliyaz@google.com>
Date: Wed, 6 Nov 2024 16:54:52 +0000
Subject: [PATCH] Revert "Add more access for GCA to edgetpu"

This reverts commit 132ad09bcedd5fecc9729b23743a53db75d91f92.

Reason for revert: <Potential culprit for b/377693729  - verifying through ABTD before revert submission. This is part of the standard investigation process, and does not mean your CL will be reverted.>

Change-Id: Ic0cf086e2dc3aad19b1e0965873f9966ad7e6c29
---
 gcam_app/sepolicy/vendor/google_camera_app.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gcam_app/sepolicy/vendor/google_camera_app.te b/gcam_app/sepolicy/vendor/google_camera_app.te
index 76f0811..3f5a0ec 100644
--- a/gcam_app/sepolicy/vendor/google_camera_app.te
+++ b/gcam_app/sepolicy/vendor/google_camera_app.te
@@ -6,7 +6,7 @@ get_prop(google_camera_app, vendor_gxp_prop)
 
 # Allows GCA to find and access the EdgeTPU.
 allow google_camera_app edgetpu_app_service:service_manager find;
-allow google_camera_app edgetpu_device:chr_file rw_file_perms;
+allow google_camera_app edgetpu_device:chr_file { ioctl };
 
 # Allows GCA to access the hw_jpeg /dev/video12.
 #allow google_camera_app hw_jpg_device:chr_file rw_file_perms;