diff --git a/private/debug_camera_app.te b/private/debug_camera_app.te index 8250e42a..69a804d9 100644 --- a/private/debug_camera_app.te +++ b/private/debug_camera_app.te @@ -13,4 +13,6 @@ userdebug_or_eng(` # Allows GCA_Eng & GCA-Next to access the PowerHAL. hal_client_domain(debug_camera_app, hal_power) + # Follow priv-app symlinks. This is used for dynamite functionality. + allow debug_camera_app privapp_data_file:lnk_file r_file_perms; ') diff --git a/private/google_camera_app.te b/private/google_camera_app.te index 4ce84afb..81e3527c 100644 --- a/private/google_camera_app.te +++ b/private/google_camera_app.te @@ -14,3 +14,6 @@ hal_client_domain(google_camera_app, hal_power) # Library code may try to access vendor properties, but should be denied dontaudit google_camera_app vendor_default_prop:file { getattr map open }; + +# Follow priv-app symlinks. This is used for dynamite functionality. +allow google_camera_app privapp_data_file:lnk_file r_file_perms;