Allow apps to access the graphic allocator HAL

am: 312e7eaa Change-Id: Ifc9b2ad755b35908b96b887f9223a81c1fd358ce

Allow apps to access the graphic allocator HAL
8dadca8e · Mathias Agopian · android-build-merger · d801cdd8 · 312e7eaa · 8dadca8e
Commit 8dadca8e authored 8 years ago by Mathias Agopian Committed by android-build-merger 8 years ago
--- a/private/app.te
+++ b/private/app.te
@@ -243,7 +243,8 @@ allow { appdomain -isolated_app } ion_device:chr_file rw_file_perms;
 # TODO is write really necessary ?
 auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file { write append };

-allow { appdomain -isolated_app } hal_graphics_allocator:fd use;
+# Allow app to access the graphic allocator HAL
+binder_call({ appdomain -isolated_app }, hal_graphics_allocator)

 # Allow app to access shared memory created by camera HAL1
 allow { appdomain -isolated_app } hal_camera:fd use;