diff --git a/edgetpu/sepolicy/edgetpu_tachyon_service.te b/edgetpu/sepolicy/edgetpu_tachyon_service.te index da34353..877a180 100644 --- a/edgetpu/sepolicy/edgetpu_tachyon_service.te +++ b/edgetpu/sepolicy/edgetpu_tachyon_service.te @@ -27,6 +27,9 @@ allow edgetpu_tachyon_server gpu_device:chr_file rw_file_perms; allow edgetpu_tachyon_server gpu_device:dir r_dir_perms; allow edgetpu_tachyon_server ion_device:chr_file r_file_perms; +# Allow Tachyon service to access camera hal via binder. +binder_call(edgetpu_tachyon_server, hal_camera_default); + # Allow Tachyon service to access dmabuf sysytem. allow edgetpu_tachyon_server dmabuf_system_heap_device:chr_file r_file_perms; diff --git a/edgetpu/sepolicy/hal_camera_default.te b/edgetpu/sepolicy/hal_camera_default.te index 624533a..e84f5dc 100644 --- a/edgetpu/sepolicy/hal_camera_default.te +++ b/edgetpu/sepolicy/hal_camera_default.te @@ -6,3 +6,10 @@ get_prop(hal_camera_default, vendor_edgetpu_runtime_prop) # Allow camera HAL to read hetero runtime properties get_prop(hal_camera_default, vendor_hetero_runtime_prop) + +# Allow camera HAL to access tachyon HAL +allow hal_camera_default edgetpu_tachyon_service:service_manager find; + +# Allow camera HAL to communicate with tachyon hal using binder calls +binder_call(hal_camera_default, edgetpu_tachyon_server); +