From 734d79bdaf9d69cefbf0ea54b6481e05e42e905c Mon Sep 17 00:00:00 2001
From: Chris Kuiper <ckuiper@google.com>
Date: Wed, 1 Dec 2021 21:29:36 -0800
Subject: [PATCH] selinux: Allow sensor HAL to access the display service HAL

Add necessary permissions.

Bug: b/204471211
Test: Testing with corresponding sensor HAL changes and sensor_test commands.
Change-Id: I01774210693ceb4a6d0d4dee4fb5e905117774d3
---
 usf/sensor_hal.te | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/usf/sensor_hal.te b/usf/sensor_hal.te
index 22a42087..ac9d5c2d 100644
--- a/usf/sensor_hal.te
+++ b/usf/sensor_hal.te
@@ -55,6 +55,10 @@ get_prop(hal_sensors_default, vendor_dynamic_sensor_prop)
 # Allow access to raw HID devices for dynamic sensors.
 allow hal_sensors_default hidraw_device:chr_file rw_file_perms;
 
+# Allow sensor HAL to access the display service HAL
+allow hal_sensors_default hal_pixel_display_service:service_manager find;
+binder_call(hal_sensors_default, hal_graphics_composer_default)
+
 #
 # Suez type enforcements.
 #