From 8c4ebe21f55d09cd0b07a0002912c306397e151c Mon Sep 17 00:00:00 2001
From: Changyeon Jo <changyeon@google.com>
Date: Mon, 7 Mar 2022 07:38:40 +0000
Subject: [PATCH] Allow EVS HAL to access data from surfaceflinger

Bug: 216727303
Test: m -j selinux_policy
Change-Id: Id89a99372e334c87cd1c80c06b5b695e5c8d69e6
---
 vendor/hal_evs_default.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/vendor/hal_evs_default.te b/vendor/hal_evs_default.te
index d1d4559ef..176d611fc 100644
--- a/vendor/hal_evs_default.te
+++ b/vendor/hal_evs_default.te
@@ -15,6 +15,9 @@ hal_client_domain(hal_evs_default, hal_graphics_composer)
 binder_call(hal_evs_default, automotive_display_service_server)
 allow hal_evs_default fwk_automotive_display_hwservice:hwservice_manager find;
 
+# allow to access data from surfaceflinger
+allow hal_evs_default surfaceflinger:fd use;
+
 # allow to access EGL
 allow hal_evs_default gpu_device:chr_file rw_file_perms;
 allow hal_evs_default gpu_device:dir search;