From 38847385386d57b40a9822bdcef7a11de1a1e4e4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Krzysztof=20Kosi=C5=84ski?= Date: Tue, 22 Feb 2022 12:44:43 -0800 Subject: [PATCH] Camera: re-add TEE access. Face auth is being investigated for Android T, so this access is still needed. It was initially omitted from ag/16719985 because it did not launch in Android S. Bug: 220886644 Test: build for P10 Change-Id: I61ecc685397fcab6f356e98abfc88e8cb34254f4 --- whitechapel_pro/hal_camera_default.te | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/whitechapel_pro/hal_camera_default.te b/whitechapel_pro/hal_camera_default.te index 5fcb5547..f604875f 100644 --- a/whitechapel_pro/hal_camera_default.te +++ b/whitechapel_pro/hal_camera_default.te @@ -10,6 +10,11 @@ allow hal_camera_default lwis_device:chr_file rw_file_perms; allow hal_camera_default gpu_device:chr_file rw_file_perms; allow hal_camera_default sysfs_chip_id:file r_file_perms; +# Face authentication code that is part of the camera HAL needs to allocate +# dma_bufs and access the Trusted Execution Environment device node +allow hal_camera_default dmabuf_system_heap_device:chr_file r_file_perms; +allow hal_camera_default tee_device:chr_file rw_file_perms; + # Allow the camera hal to access the EdgeTPU service and the # Android shared memory allocated by the EdgeTPU service for # on-device compilation.