diff --git a/tracking_denials/hal_camera_default.te b/tracking_denials/hal_camera_default.te index 6390cc13..6ab5a51c 100644 --- a/tracking_denials/hal_camera_default.te +++ b/tracking_denials/hal_camera_default.te @@ -3,5 +3,3 @@ dontaudit hal_camera_default system_data_file:dir { search }; # b/180567725 dontaudit hal_camera_default traced:unix_stream_socket { connectto }; dontaudit hal_camera_default traced_producer_socket:sock_file { write }; -# b/184091381 -dontaudit hal_camera_default hal_radioext_hwservice:hwservice_manager { find }; diff --git a/tracking_denials/servicemanager.te b/tracking_denials/servicemanager.te index b8955575..0900dcdf 100644 --- a/tracking_denials/servicemanager.te +++ b/tracking_denials/servicemanager.te @@ -1,5 +1,3 @@ # b/182086688 dontaudit servicemanager hal_sensors_default:binder { call }; dontaudit servicemanager hal_sensors_default:binder { call }; -# b/186067463 -dontaudit servicemanager hal_camera_default:binder call; diff --git a/whitechapel/vendor/google/hal_camera_default.te b/whitechapel/vendor/google/hal_camera_default.te index aca56403..b1c76b56 100644 --- a/whitechapel/vendor/google/hal_camera_default.te +++ b/whitechapel/vendor/google/hal_camera_default.te @@ -2,6 +2,7 @@ type hal_camera_default_tmpfs, file_type; allow hal_camera_default self:global_capability_class_set sys_nice; +binder_use(hal_camera_default); vndbinder_use(hal_camera_default); allow hal_camera_default lwis_device:chr_file rw_file_perms; @@ -73,5 +74,5 @@ binder_call(hal_camera_default, mediacodec); allow hal_camera_default hal_radioext_hwservice:hwservice_manager find; binder_call(hal_camera_default, hal_radioext_default); -# Allow camera HAL to connect stats service. +# Allow camera HAL to connect to the stats service. allow hal_camera_default fwk_stats_service:service_manager find;