| vndbinder_use(hal_camera_default) |
| |
| hal_client_domain(hal_camera_default, hal_graphics_allocator) |
| |
| # For camera hal to talk with sensor service |
| binder_call(hal_camera_default, sensor_service_server) |
| binder_call(sensor_service_server, hal_camera_default) |
| |
| # Allow the Camera HAL to communicate with the thermal HAL. |
| hal_client_domain(hal_camera_default, hal_thermal) |
| |
| gpu_access(hal_camera_default) |
| |
| # Vsocket camera |
| allow hal_camera_default self:vsock_socket { accept bind create getopt listen read write }; |
| |
| # The camera HAL can respond to APEX updates (see ApexUpdateListener), but this |
| # is not used by the emulated camera HAL APEX. Ignore these denials. |
| dontaudit hal_camera_default property_socket:sock_file { write }; |
| dontaudit hal_camera_default apex_info_file:file { read }; |
