diff --git a/private/app.te b/private/app.te index 2eaa8e4bfc92b453032bd7e57306dbe843a8506f..1b1f4ca0abc0008cff6234812871b53aaf794c84 100644 --- a/private/app.te +++ b/private/app.te @@ -243,7 +243,8 @@ allow { appdomain -isolated_app } ion_device:chr_file rw_file_perms; # TODO is write really necessary ? auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file { write append }; -allow { appdomain -isolated_app } hal_graphics_allocator:fd use; +# Allow app to access the graphic allocator HAL +binder_call({ appdomain -isolated_app }, hal_graphics_allocator) # Allow app to access shared memory created by camera HAL1 allow { appdomain -isolated_app } hal_camera:fd use;