From 312e7eaa2029274a98e1e947a8aa145ba701727a Mon Sep 17 00:00:00 2001
From: Mathias Agopian <mathias@google.com>
Date: Thu, 16 Mar 2017 13:00:07 -0700
Subject: [PATCH] Allow apps to access the graphic allocator HAL
Test: take a screenshot
Test: run CTS ImageReaderTest
Bug: 36194109
(cherry picked from commit 49ed0cd65849d29e5f1cd49b18e2e46de366b577)
Change-Id: I331bce37b35e30084ba9f7ecd063a344a79c5232
---
private/app.te | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/private/app.te b/private/app.te
index 2eaa8e4bf..1b1f4ca0a 100644
--- a/private/app.te
+++ b/private/app.te
@@ -243,7 +243,8 @@ allow { appdomain -isolated_app } ion_device:chr_file rw_file_perms;
# TODO is write really necessary ?
auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file { write append };
-allow { appdomain -isolated_app } hal_graphics_allocator:fd use;
+# Allow app to access the graphic allocator HAL
+binder_call({ appdomain -isolated_app }, hal_graphics_allocator)
# Allow app to access shared memory created by camera HAL1
allow { appdomain -isolated_app } hal_camera:fd use;
--
GitLab