From 5f48d4f516a599c0db5e8ce8790dad6f4be5cce1 Mon Sep 17 00:00:00 2001
From: Wilson Sung <wilsonsung@google.com>
Date: Tue, 7 Feb 2023 21:01:11 +0800
Subject: [PATCH] Add required sepolicy rules for Camera function

Bug: 263184920
Bug: 263305107
Change-Id: Idadf878564333a931b90da2415efe109e75e222a
---
 tracking_denials/system_server.te | 4 ----
 vendor/system_server.te           | 3 ++-
 2 files changed, 2 insertions(+), 5 deletions(-)

diff --git a/tracking_denials/system_server.te b/tracking_denials/system_server.te
index b72d5994..bba56eb9 100644
--- a/tracking_denials/system_server.te
+++ b/tracking_denials/system_server.te
@@ -16,10 +16,6 @@ dontaudit system_server hal_usb_impl:binder { call };
 dontaudit system_server hal_usb_impl:binder { transfer };
 # b/262455682
 dontaudit system_server con_monitor_app:process { setsched };
-# b/263184920
-dontaudit system_server hal_camera_default:binder { transfer };
-# b/263305107
-dontaudit system_server hal_camera_default:binder { call };
 # b/264489786
 userdebug_or_eng(`
   permissive system_server;
diff --git a/vendor/system_server.te b/vendor/system_server.te
index 9b518efb..7082206a 100644
--- a/vendor/system_server.te
+++ b/vendor/system_server.te
@@ -1,2 +1,3 @@
 # Allow system server to send sensor data callbacks to GPS
-binder_call(system_server, gpsd);
\ No newline at end of file
+binder_call(system_server, gpsd);
+binder_call(system_server, hal_camera_default);