From 7f271ce0615c51c176e78bdb540f1215eaeeaf54 Mon Sep 17 00:00:00 2001
From: Jan Sebechlebsky <jsebechlebsky@google.com>
Date: Mon, 15 Apr 2024 08:25:19 +0000
Subject: [PATCH] Fix selinux denial when running adb shell cmd virtual_camera
 commands

Bug: 333889277
Test: forrest
Change-Id: I195125b907f56e9a50d13e3ca4c28a1cfcc257b1
---
 private/virtual_camera.te | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/private/virtual_camera.te b/private/virtual_camera.te
index 793f7ed19..27c5df995 100644
--- a/private/virtual_camera.te
+++ b/private/virtual_camera.te
@@ -50,3 +50,8 @@ allow virtual_camera dumpstate:fifo_file write;
 
 # Needed for permission checks.
 allow virtual_camera permission_service:service_manager find;
+
+# Allow 'adb shell cmd' to configure test instances of camera.
+allow virtual_camera adbd:fd use;
+allow virtual_camera adbd:unix_stream_socket { getattr read write };
+allow virtual_camera shell:fifo_file { getattr read write };